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Many of the articles published in COMPIJTIST detail the removal of copy protection schemes 
iVoiii aimintTciul ilisks uifunlairi iiiromiiiliLm un t;upy prultflion und backup niclhods in jjetiLTid. 
Wc also prim bit copy parameters, tips tor adventure games, advanced playing techniques {API's) 
tor Lireude game lunatics and any other inlomiaiion which may be olusc lo the serious Apple user. 
rOMPUTlST also contains a special CORF, section which Ibcu.w.s on jnrormation not directly 
related to copy proicclion. Topics may include, but are not limited to: lulorials, hardware/software 
produci reviews and application and utility programs. 



VVhat Is A Soft key Anyway? Sdftkty is u lemi 
whreh we ccined lu licserilic a procedure Itiat remnvcs. 
ttT uL [t;ii^*l fiu-iimvtfnls, iiny t;ti[Ty pn>nx'ii[in tin a 
particular di.sk. Once a sotlkty prowdure has been 
perfnrmeJ, ihe rcsullmg disl< can usually tn' ftipiL-iJ by 
the use of Apples COFYA prtigiam (t>n the DOS 3.3 
System MiL-^rcr Disk). 

Conimandii And Controls: In any snide appealing 

in COMPL'TIST, (.^iiiTin lards which y rc.tider is rL%|uirL"d 
to pcrtorni arc set apart from normal tcKl by being 
indcnicd and botd. An example jsi 

PIM6 

i=i)lIow thi.s wiih ihc RETURN key. The RETURN key 
mu-^t he pressi^ at iho tuul nf every saeh i'rirtmumil ]Jnle^s 
otherwise ,'ipeeit'ieiJ. 

CoeUiiiI L'J>aiijetL';^ art: nalieutL'tl hy buiTi^ tsir>Leil. An 

example is: 



Tu ecanplt^le litis etannund. yiiu niusl In si lypL- diL- 
nuniher 6 and then place one finger im Itle CTRL key 

and tF[iL' h[Et:cr {][[ ittt: P key. 

Ke(|uirtfnients: Most nf the programs and .ralikeys 

^vhirli iipjit^ur in Cf^MPtlTIST niuiicre Line itf lliL* Apple 

II series ill' cianpLiicri; and ai leasi ont disk drive wlih 
L)O.S VS. OL^easicmiiHy, *tomtr pi*o>!rjiTns and procetlures 
have special require men is. The prerequisites for 
ileproiet:nt^rt lecbniqtit^s or prE.igrams will always hi: lisieil 
at the heginningotlhe article under (he '■Requiterttentsi" 
heaJ.lin^. 

Software RecommendatiuriK: The folkwinj; pro- 
-ams (<ir simiktr outs) lire .strongly recommended for 
readers wti(7 v^'ish to obtain the most bcnellt from our 
ijrucles: 

1) Applesoft Projjrani Editor such as Global Program 

Litres Editor (GPLE). 
2\ Stctor Edittir sucli as Di.skEdil. ZAP from Bag of 

Tricks or Tricky Diek from The CJA, 
3l Disk Scareh Utility such as The Inspector. The 

Tracer from The CIA or The CORE Disic Searcher. 

4) .As.stnibler such a.s dtc S-C Asseiniitci \}i Mcrlin/Big 
Mae- 

5) Bit CopY Pr(>;>riUli aueh aj Copy [[ Plus, Locksiiulli 
or Tlie [Essential Data Duplicator 

d} Ttsl fvrliliir t.'apybk" of prtiducing normEil ^^uenlbil 
text I'lks such a.s Appiewriter ||. Magic Window || 
or SerCE^nwritur ]|. 
You will also tmd COPY A, FID and Ml-'ITIN from 
Ihe DOS T;t Syili'in Master Disk useful. 

Super lOB; Thi.s projiram has mosi recently appeared 
in f.'OMPU TIST No 32 So ecnil softkey procedures will 
oiakc use of a Super lOB controller, a siiiail program 
Ihat miiM tie keyeil inlii itte middle of Super lOB The 
controller changes Super lOB so that it can copy different 
disks. To get the jatcst version of this program, you may 
order COMPLfTiST fsti, 32 as a Isaek is.'juc or i)rder 
Prt^gram Library Disk No. 3^. 

RESET Into The Monitor: Some sottkey pni- 
cedures require thai the user be able to enter the Apple's 
system monitor during the eseeutiori of a copy protected 
program. Cheek the following list to see what htirdw(irc 
you will need lo obtain this ability. 
Apple If Plus - Apple fic - Apple eumpatibt(^5; I) Ptaee 
an Inleyer BASIC ROM card in one of the Apple slots. 
^1 Use a non-maskable interrupt (NMIl card such as 
Kepby Ell Wilik:Ei!il. 

.\pple II Pins - .Apple eonipatlblcs: I ) Install an PR ROM 
with a iiiodiried RESET veelor on the computer ~s 



motliEjiboard as detailed m the "MtKliltcJ ROM's"" article 
of COMPUTIST No. 6 <ir the "Dtial ROM's" arlicltf 
In COMPUTIST No I') 

Apple lit - Apple lie. InsUill a inodillcd CD ROM on 
[he computer's nn.itherboard. Clay Harrcll's company 
(CEitting Edge Eeu., Bo\ 4,32.M Ren Ccn Station-HC. 
Detroit. Ml 4^2i^) sells a hardware device ihm will 
give you this ability. Masking this Enodiflealion to an 
Apple Ik will void its wurraniy hut the increased abiiily 
to remove copy proieclion may .justify it. 
Rtctiminended l.iUTiilure: The Apple || Rcfercnee 
M:muat and DtJ.S .^.3 manual are ma.sts for any fvonons 
Apple user. Other helpful books include; Betit'iith Apffh 
IKIS. rtiin Wonh :ind Pieter Icrhner, (JuHllly Sollware 
SI9.9,*^; A^.Vi.'nthty Liinfitieiyi' For Thi' Appli-.^fff 
Fm^rafumtT^ Koy Meyijrs and CW. biitley, Add]s^.in 
Wesley. S 16.95; and mini's Wiere In 7Jir Appk'. 
William Ltiberl. Mien. Ink . SM 05. 

Keying In ApplBsoft Programs: BASIC programs 

are printed in COMPUTIST in a tormai that Is designed 
to minimize errors I"tit readers who key in these pi'ogian"is. 
To understand this formal, you ttiusl rirst iindersland the 
fom"raltcd LIST feature of Applesoft. 

An illusiraimii- If you strike these keys: 

1« HOME:KKMCLEAR SCREE^ 
a program will be stored ire the eonipuler's memory. 
Strangely, this program will iitit have u LIST thai is 
exactly as you typed it. Instead, the LIST will Lxik like 
ibis: 

18 HOME : REM CLEAR SCREEN 

Programs don'i usually LIST the .same as ihcy were 
keyed it^ hecau.se Applesoft in.serls .spaces into a pro}i,ran"i 
listing t>efore and after every command word or 
Ttiathcniatical openUEjr Tht^sc spvict:s usually Eliin'l pfise 
a problem except in line numbers which contam KLM 
oi DATA c"ominatEtl ivoids. "the space iiESeited aliei lliese 
command words can tw mislciidmg. For example. If you 

want a prognmi In llavE? a list li^^ ihis: 

l(» DATA 67,45.54,52 
you would have to omit the space directly sifter the DATA 
command word. If yE>u wen; to key in the space ilireelly 
after the DATA eommanJ W'ord. iheLlSTof ihe prograni 
would look like this; 

IB DATA 67.45,54.52 
'IhE.s LIS"! IS diftereni iron's Ihe LIST you wanted The 
number of spaces you key after DATA and RCM 
cominanil won Is is very importani 

All of this brings us to the COMPUTIST LlSTing 
fnmiut. In a BASIC LlSTing, there are two types of 
spaces: spaces that don't inaiter whether they arc keyed 
or noi unit vpjEct^s lluti miisi he keyed Spaces thai must 
be keyed Iti are printed as JcUii characters f'). All other 
spaces in a COMPUTIST BASIC listing are put there 
for easier reading and it doesn't matterwhccher yoti type 
them or not. 

Tfiere is one iajiisfejjltciri: If you ivanl your dieeksuitis 
(See ■■Compyiing Checksums" section) to match up. you 

must nut key in jiny space.s after a i^A l"A coitrmand worti 
unless they Eire marked by delta characters, 
Keyillj) In Ht^Vdumps: MaehEne lanE.ua;>e prognims 
are printed in COMPUTIST as both source code and 
hcxdiitttps (.July tine ol lliese ktrpiiais nt:etl be kcyetl in 
lo gel a niachine language program, Mexdumps are the 
shortesl iind easiest Ibrmul lo lype In. 

To key in hc,>!i]unips. you tnusi firsi enter the !Tii>nitor: 
CAU. - 151 

Now key in the hcxduitlp exactly as it appears in the 
magazine ignoring the four-digit checksum at the end 
of each line (a "S" and four digits). If you hear a beep. 



you *ill know Itiitl yoti have typed somelhing 
ineorrcclly and miisl retype, that line. 
When finished, return to B.ASIC with a: 

Reioeiubei lii I^SAVE lite prE'j^l;j;ii wilU llie enEte4.'E 

filename, addrcjtoand Icnglh pttninKilcr.sa.s given in 
the article 

Keying In Source Code The source code 

portion of El EOaehine language program is provided 
OEtly to tictteE CApiaEn tlie pEngiaEErsO]>eiaE]E}Ei. II you 
wish to key it in, yoti will need an assembler. The 

S-C Asseiiihltif is EEseii [ii geniriau* Jill source eiKle 

primed in COMPUTIST. Without lhi^ dS^rt;mblE:n 
yoti wi[l huvt* tfi t ran si ale piea.^s of tht: soiirtf fod^ 
into somcihing Vf^^r iiyycniblcr wilf undcrstLintl. A 

tat)lL"((l St' Asst:[iibk![ ilirL:v:livt.'S fiisil lur lh]s pwrpjst* 
was printed in COMPUTIST No, 17, To iransUtt 
source code, you will neetl lo underiitand (hi; 
directives of your assembler and convert the 
directives usetl in ihe soitrce code listing; to simitar 
direelivcs used by your a.ssemhiet. 
Computing Checksums Checksums are four 
digit hexadecimal numbers which verify whether or 
not ytJU keyed .i progr^im exactly as it was prinieil 
in COMPUTIST. There iire two i.ypes of checksums; 
one created by the CHECKBIN program (for 
machine language pfogramst and the other ereaicd 
by the CHECKSOFT piojtam (loi BASIC 
prt>grams). Both pr^igrams appeared in COMPUTIST 
No. I and The Best of Hardcoic Comptjting. An 
update to CHECKSOFT appeared in COMPUTIST 
No. IK. If the ci lock sums tiiese prug tains create uw 
your computer inateh the checksums accompanying 
ihc pro^^rant In Ihc ma^i.azine. then you keyed in Ihe 
program correctly. If not, the program is incorrect 
at llie line where Ihe Insi L'liecLsuin diilei.s. 

]) Tt) contjjule CHbCKSUb'l' checksuttis: 

LOAD (ilriiMme 

flRUNClIECKSOFT 
Get the checksums wilh 

& 

And eorrcct the program where the checksums diflcr. 

2] To etmipule CHUCK BIN checksums: 
fAI.I. -151 
KLIJAI) rdename 

Install CHtCKBIN at an oui ol ihc wav place 

BRUN CHECKBIN.A$6(Mm 
Ciut UiL' >L'ht:ck!^iJiiis h> ly|}inji> xUv KLMrliiig fidLirc^NiSs 
a period iuid cniciing iidtiress of ihc file followed by 



AntJ i'ii^Tn^'t ihi' lii]4."\jit whii'b ihc iliiL!LJvMuni% ditVi^r 



Coping with 
COMPUTIST 

Welcome to COMFU TIS'l , a puhlicalion 
devoted to Die seritiiih user of Apple ]| and 
Applf ]l compatible computers. Our 
maga/ine cotitainij iiifornialloii yiut arc not 
likely to find in any of the other major 
journal)! dedicated (ii Ihe Apple market. 

Our editorial policy i% that we do NOT 
condone >iDfltware piracy, but tvc do believe 
that honest users are entitled to backup 
commercial disks I hey have purchased. In 
uddiliun lo the sccurily ol' u imckup disk, 
the removal of copy protection gives the user 
the option ut modifying appliculiun 
programs to meet his or her needs. 

New readers are advi.'ied to read this page 
c^irefiilly to a^"oid frustration \^ hen 
attempting lo follow a soflkey or Hheii 
entering the programs priiiterl in this issue. 
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Title Publisher 

Recommended Literature: 

D Beneath Apple DOS (Book) Quality Software 
D Beneath Apple ProDOS (Book) Quality Software 
D Disk Edit (Book of Softkeys vol 1) SoftKey 

Recommended Software: 

Q Global Program Line Editor Beagle Bros 

n Super lOB (Issue No. 32 w/disk) SoftKey 

D Magic Window // (specify J[ or //e)Artsci 

D Bag of Tricks H Quality Software 

Miscellaneous Bargains 

D Dazzle Draw Broderbund 
n F-15 Strike Eagle Microprose 
n The Print Shop Broderbund 
D Flight Simulator U Sublogic 
D Night Mission Pinball Sublogic 
D Exodus Uhima III Origin Sy.9tems 
n Hitchhiker's Guide to the Galaxy Infocom 
D Witness Infocom 
D Dino Eggs Microlab 
D Zorkm Infocom 

^Domestic Shipping and Haudling: $2.00 per item. Five 
Namft 


Suggested Customer 

Retail Cost QTY 

$19.95 $16,00 

$19.95 $16.00 

$12.95 

$49.95 $35.25 
$10.95 

$149.95 $106.00 
$49.95 $39,75 

$59.95 $47.50 
$34.95 $28.00 
$49.95 $39.75 
$49.95 $44.00 
$34.95 $30.75 
$59.95 $47.75 
$39.95 $31.00 
$39.95 $31.00 
$40.00 $20.00 
$44.95 $35.00 

Subtotal 

~ ~ - - Shipping* 

Total 

or more items FREE. 

TDjif 


Total 
Cost 
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Citv State. 
Countrv Phonr 




Zip 

F,xp. 


CP35 
WA 98411 

iquire as to 


Signature 




To order, complete order form and mail to: COMPUTIST PO Box 1 10937-SOS Tacoma, 

Offer good while supplies last, Washington residents add 7.8% sales tax. Foreign orders ii 
appropriate shipping and handling fees. Limited offer, expires December 31, 1986. 



FREE COMPUTIST 



YES! You Get 2 FREE ISSUES 

for every NEW subscriber that you sign up, 

We^ll extend your current subscription by 2 issues for every new paid subscription 
you get to fill out the subscriber forms below. 

BUT... First Class subscribers MUST recruit First Class subscriptions to receive the 2 extra issues. 

This rule (same mailing class) also applies to Foreign rates. 
Standard US subscribers can recruit any new subscriptions and extend their standard subscriptions. 

us funiia drawn un US bank. Send check/money order to: COMPUTIST PO Box il0846-T Taccima, W.A. 98411 
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If y™ lut yiiur subsuripLioii expire, you are tonsidercd a NEW SubscritPer 
and are NOT eligible for the free issues. 



NEW SUBSCRIBER 



YeSf I ^ant to siitiscritjo to yo^r tine publication. 

n US: $20 US Piist Class; %24 C Can/Mex; $34 □ Other Foreign: 160 



City 

t^ountrv . 



^\»>^~ 



-^p- 



.JWlOaa. 



Exp, 



Sicfiiatur^- 



CURRENT SUBSCRIBER 



D Add two issues to this subscripiion. 

D Renew mv .subscription. Fayuient is enclosed, 

D US: ilO US First Class: $J4 D CaiWMcx: $34 



n Other Foreign: $60 



City 

Ctiui]Uy_ 



_Zip_ 



Exf. 



Si^tialur^ . 



If you let your subscription ejipirc, you arc considered b NEW subscriber 
and arif NtJl' eli^itile loi die tree issues. 
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NEW SUBSCRIBER 



Yes, I want lo aubacribe to your fine publication 

n US; S20 US First Class: $24 D CanMex: $54 D Other Foreign: J60 



Address. 



City_ 
Ccjuniry 



JState- 



-Zip- 



- Phone . 



EKp. 



Signatur{^ 



Attention COMPUTIST Collectors 

The following back issues are practically gone. Once they have sold-out, 
they will no longer be available in magazine form to our readers. 

1 1 Softkeys I Sensible Speller | Exodus: Ultima III | Readers' Softk^y^ 1 SoftPorn Adventure | The Einstein Compiler vS..^ | Mask 
of The Sun | Features | Copy ][ Plus (4.4C); Update Of An Old Friend j Parameier List For Essential Data Duplicator | Care \ UltimLdter 
in I The Mapping of Ultima 111 | Ultima U...Thc Rest Of The Picture | .,..,...„..»..„..,....* ..-,. .,,... ..,..-. 

1 3 Softkeys I Laf Pak | Beyond Castle Wolfenstein | Transylvania | The Quest | Electronic Arts 1 Snooper Troops (Case 2) 1 DLM 
Software | Learning Willi Leeper | TellStar | Core \ CSaver: The Advanced Way to Store Super lOB Controllers | Adding New Commands 
to DOS 3.3 I Fixing ProDOS 1,0,1 DSAVEBug | Review \ Enhancing Your Apple ] Feature \ Locksitiilh 5.0 and Locksmith Programming 
Language | - 

Softkeys \ Choplifler | Mufpiot ] Flashcalc | Karateka | Newsroom | E-Z Draw | Readers ' Softkeys | Gato | Dino Eggs | Pinball 
Constniction Set | TAC | The Print Shop: Graphics Library | Death In The Caribbean | Features \ Using A.R.D. To Suftkey Mars Cars | 
How To Be The Writcmaster | Core \ Wheel Of Money | - 

First Come, first seived. Some issues may be slightly damaged. No reservations allowed, prepayment only with 3BIV. To order, phone (206) 474-5750 or use 
IhB order form on page 31 . For phone orders, please have subscriber ID number and ship-to address ready. Norma! back issue rates apply to foreign orders. 
Washington State residents add 7.8% sales tax. 
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softkeys: 

10 Hi-res Cribbage 

12 Olympic Decathlon 

by Marc Liix'nc 

14 Revisiting F-IS Strike Eagle 

)n Jim Wallace 

24 Masquerade 

by Steve and Rtid Siiiitli 

28 The Hobbit 

h\ J. J. Clfford 
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Adorers all adveniginq inquiries loCOMPUTiST. Advertising 
Deparimem. PO agx noeie. Tflcoma. WA 58411. Miill 
manuscripts to COMPUTIST, PO Box 1 1GB46-K Tacnma: WA 

Enlire contents t^t^vnghl 1935 by SoEiKey Pubiir.mng Atl 
rigH(b it^£»t^rvtjd. CuFjylng dnns Inr nthnr rngn pei^onal or miema} 
refersnce [wilhaul G^preSf; writien pefmi^SJOn 'rom ihe pubfisti^r) 
IS profiitiited. 

Tnc ariltorig! stott esaiimes no liabiliEy of responsibiliiy tor ttre 
products adv&rtised in me magaiina. Any options SKpressed 
by Ihe aulhors am no1 nec&ssarily thosa of COMPUTIST 
magajine or SoftKey Pyhlishmg. 

Appts u Ju=Uiy refers to fln Appier J[ cornp^t^r:and i& a tradtimai^ 
ci Appii^ CcjmpuLere, Inc. 

SUBSCFIIPTIONS: Hijies <for G issues); U.S S20, U S Isl 
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to: COMPUTISr Sub^crJpiion Department, PC Box 
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DOMESTIC DEALER RATES: Calf {206) 474 5750 for more 
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Ghange or Address; Please aUow 4 wesk-t for tJiangts ol 

adOffiss lo lake ©tJeci- On postal torm 357S supply yoyr n&w 
addre&e and your most recent address ^abGf l.'isues missed du6 
to. non rocaipi ol chartge of address may be acquired at the 



/eature; 

20 Putting a Neiv F8 on Your Language Card 

If you'd ralhtr nol modify your motherboard to pul m EPROM containing your own F8 
then you can follow this procedure uiili/ini: ynur lnn<;uut;e earU. h\' Kcii Biinitil 



core: 

16 Exploring ProDOS by installing a CPS 
Clock Driver 

Using this aniclc. you can make your CPS nuilii function card automatically stamp the lime 
and date on every file yoii SAVE, by Pm/I Bhtimiciu 

review: 

22 The Senior PROM 

by Rohu! Kiunvtes ■ <. • '■'■• 

APT: ^ 

26 Swrord of Kadash 

by John Delia Piu 

departments: 

4 Input 

6 Most Wanted List 

7 Readers' Softkey 6l Copy Exchange 

Datasoft's Puoyan by Kevin SartorelH. Mindscapc's The Perfect Scare by P- J. VurDip.'.tiii, 
Windham ClaKsics" Alice in Wonderland hy Omrles Taylor. Sterlmg .Swill s 'I'ht' Money 
Manager tv Z'. J. Tlwmpsun. Hoffmiin bdueittioiiars Good 'i'hiiikingM/'. J. Jluinijmm. 
Sir Tech's Rescue Raiders Jfv Steve mid Rod Smith 




Please address letters to: 

COMPUTIST 
Editorial Department 

PO Box 110846-K 
Tacoma, WA gS'lll 



Include your name, address and 
phone number. 

Correspondence appearing in the 
INPUT section may he edited for 
clarity and space requirements. In 
addition, because of the great 
number of letters that we receive and 
the small size of our staff, a response 
to each letter is not guaranteed. 

Our technical staff is available for 
phone calls between 1:30 pm and 
4:30 pm (PST) on Tuesdays and 
Thursdays only. 



Another Halley Project 



Tlic sofikey for [he llallcy Projcci you 
prcssiited a few issues ago didn't work when 
I tried it, but fortunately 1 was able to find a 
new one iliai worked on my eopy. 

RUN COl^YA 

Press Reset wh^n the slot and drive questions 
ufipear. Now type: 

CALL -151 

B'I25;18 68 

OS 

199 POKE 47426,24 
ZAf POKE 47426.56 
259 POKE 47426,56 
KUN 

Wlieii linblied. run your lavuriie disk editor 
and change traek h\ I. .sceior S<A. hyte S9A to 
$ID (as in previous softkey). DoncI 

Also, for those of yon who love to mes;^i 
around with progmms. the iniiiul hi-res picture 
run.s from track .?0D, sector $9F through all of 
sectors $0E Lind S0F. Unfortunately, this pieture 
is loaded in a very odd way. In even j^roups 
of eight lines, the two sets of four are switched! 
Fortunately, aftt'r a bit of .sweating, [ came tip 
widi a routine to lis it. Sinee the process k fairly 
simple, the routine i.s like a toggle, ff you run 
it iwicf. it will return to its original format. 



Hard to explain, Just try it; Cottvens page 2 
($4M0'1 picture to new format on page I 

(Simm. 

m^-M m 84 06 84 08 A9 40 

6008 ;.EA EA EA EA 85 07 B2 05 

6010:AA As 07 38 E9 40 EA EA 

601S:C9 10 B0 05 18 6? 30 90 

6029; 03 18 69 10 85 09 84 0S' 

5028 :8A 92 08 CS 00 D0 05 A5 

6030:0/ C9 60 D0 01 60 

IJ. Eirsi., use a Supia- lOB cuntrolier ty copy 
tracks D, E. and F onto a QOnnallv initialized 
disk, 

2) Then (thi.s is the trieky part) build a TS list 
for this hi -res screen just Hkt* DOS would-, 
iitcrcasing sectors, dccrcasmg tracks, Akso. 
make a catalog entry. Consult Beuealb Apple 
Dos for details. 

■ J.) Now m;ike and save your own screen on ihe 
same disk tindtr the same tiame, Thi;, will 
insure that it falls on the same track. 

4) Since DOS inserts 4 bytes at the begintiing 
of eaeh I'de. move the entire fde (S2W0S3FFF) 
left 4 byte.!;, 

5) Now mcs.s it up with the subroutine above 
and save it again. 

6) Copy it back to the working eopy, 

7) U,siiiij; your finest optic ahi lilies (or the little 
scrap of paper that has ihe top 4 byie.s of die 
picture ). reconstruct these 4 byte^ jiid pliice 
them on track SF, sector $F. axing your favorite 
.sector editor. (Note; it'.s usually easier to do 
this if you imeniionally leave the 8th tine from 
the lop blank because all you have to do then 
is just zero tho.sc bytes.) 

PS. Those NOP's don't mean a thing. I was 
revising the code and 1 didn't want to recalculate 
all the relative branches. Also, thi,^ code is 
heavily b^Cfdl dependent. 

John Cieinents 

San Fiancisco. CA 



Copy ][ Plus 6.0 on a Franklin 



1 recenlly bought a copy of COPY || Pius 
Version 6. 1 have a Franklin Ace 1009 and 
could not boot this program. I had to modify 
the code in order to run it. Here's how to get 
ProDOS Version 1.1.1 or 1.0,1 running on 
your Franklin Ace l&dVI or 12013: 

I) Boot the ProDOS system di\k You will see 
a title sciecn with Apple \ u.ipy i ight notice. 



2) When the sy.stem locks up. press the Rcsci 

key. You will Jiiinp into the monitor and see 
ilie prompt (f;). 

3) To start the drive and boot the di.sk under 
Version 1.1.1 . type: 

269E;EA EA 

2M&G 1 

4) fJnder Version 1.0 I . type; 
265B:EA EA 

zmi/tc. 

You can make ti perumnenl patch lo Version 
1.1.1 by typing: 

BLOAD PRODOS,A$2fle»,TSYS 

CALL -151 

269f::EA EA 

BSAVE PRODOS,A$2«fle,L$3ABe,TSYS 

I hope this helps some of you Franklin Users. 

Larry A 1 tuna 
Siaten Island. NY 



Another Blazing Paddle.s 



Was 1 happy when I received COMPUTIST 

No. i 1 . and saw a softkcy for Blading Paddles, 
thinking 1 would finally get agixKl l>ackup, Well 
guess what happened... that's right. 1 have a 
different version from the one yon published, 
However, by using the information from Frank 
Carone's article and making some educated 
guesses. 1 was able nj make a COPYA disk. 
Here's the procedure. 

1) Copy the disl; with COPYA, 

2) Use your fsvoi-iteiector editor to change: 



TRACK SECTOR BVTE 



FROM 



TO 



13 


D0 


£A 


14 


F7 


EA 


2C 


D0 


£A 


2D 


F? 


EA 



SB 



3) Write the change to the di.sk and you're donel 

You have a great magazine keep up the 
good work! 

.•it eve Rodgcrs 
Libby. MT 
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Dollars and Sense 



Here's a softkey for Dollars and Sense by 
Monogram. 

n Copy the disk wiih COPYA 

2) Run a sector editor and go to tr;K"k $0, siector 
$5. Enter the following values starting at byte 
S8C 



EA A5 02 38 E9 40 85 04 A5 03 E9 
AS 3F Bl MM 02 88 10 F9 

5) Thafs it. 



8S 05 



Dan Agnew 
Fairport. NY 



ProntoDOS Procedure 



I'lii iiralerul it) Tom Weishuur for putting the 
65C02.Tronu>DOS ishuc to lied and lor letting 
us know about his newslellt.-i- (my clieck's ia 
the mail). 

I liHve a friend who read abaut the alleged 
intompatability of ProntoDOS and his new 
65C02 and held off installing the ctiip until 
I told hiiii ihal there was no pvoblcml Of course, 
it worlcs tine. 

And speaking of mv favorite "t'ast DOS", 
ProntoDOS - in COMPUTIST No. 30. you 
published a nice article by Pliil Goftz, 
liureasniji Your Disk Capaciry. In the artiL-le, 
Phil 10 Id of a procedure to capture I'lflcen 
sectors from track two of" a DOS 3.3 disk that 
might seeiTi slightly messy for a iKginner. Tlierc 
is a much easier way to do this if you want to 
use ProntoDOS. Since ProntoDOS only uses 
tracks 2cro. one and sector ^.ero of track two, 
it is a natural to copy rialit onto a disk thai has 
been INlfcd tor thirty five tracks. Using this 
procedure would eliminate the need for step 2 
in Phil's artiele. ['he procedure would be done 
after the new diik was INlTed in step 5 and 
would read as follows: 

6) Use Copy 11 Plus to copy ProntoDOS to the 
new disk. Or use any bit-copy ptiggian) copying, 
only tracks W-3, 

The patch in step 3 of the aitide covei's 
patching ilic VTOC Iv show thai only sector 
zero on track two is in use (bytes 40 and A I 
on track SI 1 sector W0 are ctiangCd rroiii their 
nonnal values of STO 0B [no sectors freej to SFF 
FE [only sector ?,ero in usejj, 



Anyone cati have a disk with only the ej(tra 
ilfteen sectors on track tvMo freed up by INlTing 
a disk with ProntoDOS thusly: 

1) Bool a disk with ProntoDOS installed on it. 

2) Reset the computer to get the Applesoft 
prompt, 

i) Put a blank disk in drive I and type 
INITHELLO to INIT the disk with a program 
called HELLO. Note the space after INIT and 
HELLO was purposely left out as it's oplionuP 
And that isn't in any Apple Company 
puhlicalinn that I've ever read! 

Another hint when using ProntoDOS - a lot 
of people run into the problem of looking at ihc 
Boot Program Name u.sini; COPY ][ Plus. Well. 
you won't see it. and you j;el the message. ' ' NO 
BOOT PROGRAM TO CHANGE' "^hecause 
the Boot Program is not in the usual DOS 3,3 
spot on track .SI. sector .S9 at byie %lfi. 
PtotiloDOS stores its bo<.)t program name at 
track 1. sector 7, byte %1^. 

II you want to change the Boot Program 
Name, you've got two clioices. Use a sector 
editor to change the name. Or. i NIT a new disk 
with PnaitoDOS using tiic desired name instead 
of HtiLLO. and copy over all your tiles froni 
the old disk to the new one 

Finally, what do you do if the desiretl Root 
Program isn't an Applesoft program but a 
binary program or a Hie you want to EXEC? 
Simple, according to Sciiecilli A/i/jIc DOS. paj;e 
7-3. the byte at .'i9E42 in a 48K DOS .1.1 should 
be 0&. 34 or 14 lor ApplesoR/InLe^er. bmary 
or EXEC llles respectively. This byte is found 
ui) tile DOS 3.3 disk on track 0. sector S0D, 
byte $42 and on the ProntoDOS disk two sectors 
behind that at track 0, sector S0B. byte $42. 

PLFASF. publish more COMPUTIST! 

Khalid Abu Kabhous 
Kingdom of Saudi Arabia 



Abimt Rescue Raiders 



First. I am very glad there is a magazine for 
apple users like COMPUTIST. It is the only 
computer magazine i find woith subsciibiiig to 
and the only magazine I Imd myself always 
anxious to receive in the mail. Keep up t!ie gotwi 
work. Next, though I'm not much of a hacker. 
I find [ can easily type in codes from your 
maga/.ine. Here arc a tew questions that 1 have. 
On page 6 of COMPUTIST No. 16, it mentions 
thai to access the cheat mode on i^eseue 
Raiders, you have to tvpe in POPPY It also 

mentions that different versions of the game 



might require different passwords. (On page 4 
of COMPUTIST No. 26 i! lists llie password 
as ZIPPY). In issue 16, it also says that to 11 nd 
the password for your version of the game, look 
on track .$0F, sector $9. bytes $A& to $AC and 
read backwards. My friend and 1 both own 
copies <ir the game antl when we read byles $A8 
to SAC on our disks we both get different 
garbage, though we both do have BOBBYPJN 
spelled backw'ards at bytes S70 to S77. But for 
boih of our disks, when we typed the password 
in. none oi'thc cheat features would work. The 
cheat fe.'ilures would only work if the disk was 
deprotected with the method used in issue 16. 
Then the cheat mode worked line, but whenever 
you wanted to fire bullets to the right, the bullets 
would he pulled up into the air instead of 
commg down. Docs any reader out there know 
how to fix this problem with their deprotected 
copy? 

Also. 1 have a copy of Graphics Expander 

by Springboard that I cannot backup properly. 
I tried your soilkey lor Newsroom on page 18 
of COMPUTIST No. 23 on it and the program 
seems to itin fine (even the Newsroom demo 
on it works) until after it checks to see if there's 
a disk in drive 2. Then the progi am just reboots. 
Finally, 1 have fourgame.s for the Apple made 
by Atarisofi. Gala.xian. Jungle Hunt, Gremlins. 
and Centipede. I've tried everything to copy 
them but nothing .seems to work. Any 
suggestions',' 

Besides that, all the other softkeys I've tried 
from your magazine work. Again, keep up I he 
good worktll 

A Khan 
Canada 

Mr Kahn: Must Asuvtsofi sojhi'ure can he 
copied ty lypiitj;: 

B942:1S 

wut RVNnin^ COPYA. 



Silent Service Stuff 



I would like to see Silent Hervive by 
Mieroprose on your Most Wanted List, as it 
seems to be impossible U) backup with EDD, 
Copy J[ Plus or Locksmith, or any other 
prograni 1 have access to. 

I tried to deproteci it hy making a copy with 
EDD T0-T23 and using a sector editor to 
change bytes starting with CA: from 20 3A DB 
to EA EA EA 6t) on tracks 4 and ."i and sector 
4 (both tracks) with partial success. This 
eliminated the message HARDWARE 
FAILURE hut the message YOU HAVE RUN 
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INTO AN ENEMY MINE inviiriubly wcurs 
after about 5 lo IW minuics of play. 1 have never 
receivml ihis message while using the original 
disk, 

It is t:asy to tell if you are going lo get the 
RNEMY MINE message wliili,' itie program is 
[(latimji. (alter sclcctmj! the level ], as ii loath 
with ill! .iiiiiihlc traci<: change. 

My manual is markL-ti Change I . \!> Sep! 85 . 
The ^ame u^ in vour iirtiele (in page 4 of 
COMPIJTIST No', m The nu-thticl by Mr 
Leiiaiii: dues mil work on my eopy. or perhaps 
he did not use the copy long enough for Ihe 
ENEMY MINE message to occur; 

1 ronsiilfi your publication Ihe best Appfe 
magazine on ihe market, with Nibble running 
second and inCid<-'r in third place, and 1 look 
forward lo eacb issue of COMPUTIST. 

Sheldon M. Atterbury 
Sierre Madre. CA 



Apple Only? 

Miks no one seems u> be arguing acainsi 
retaining COMPLITiST us an Apple only 
magiizme. I thought ] would tr\ and give a bii 
of an argiinient for the odier side. My 
suggest jon is I hat the majiaziiic should be 
devoted to hackers [in Ihe original sense of 
computer alficionados rather than vandals) and 
to open nrchitcciure eompmcre. At the ]jrt;scnl 
time then this wtnild mean thai the magazine 
would be devoted mostly to Apple with small 
sections devoted to the IBM PC and clones aiul 
perhaps the Amiga 

Don't get me wrong, I tike the Apple, and 
it will be around tor a long time. But. nothing 
lasts forever. The Mixlcl T Ford w-as once the 
automotive etjuivtilcnl of the Apple: however 
a magazine pre,i;ently devoted to Moiiel T Fords 
would have relatively limitetJ circulation. 
People who are seriously interested in 
eoiitputers will naturally progress towards 
machines that have 16 or 32 bit processors that 
can access u loi nf memory quickly. 

I am convinced that be lore long we will have 
computers wiih pij?abytes of memory both on 
optical dise.'i and in RAM that will permit an 
cxplo.sion of innovative programming that will 
make today's progriims wein childish bv 
comparison. I don't believe that Apple will he 
part of this explosion. There i.s one furiliei 
consideration, 'fhe Apple market is presently 
saturated with reialively good programs 
considering the limitations of the Apples slow 
processor and small amount of memory. 
However, the market tor IBM PC program.s is 
presently wide open. Anyone who uses a PC 



knows thai there is a tremendous inarki!i oiu 
there for innovative games itiat aren't merely 
re-written Trom other comuters. and e.specially 
for utilities. The utilities presently available tor 
ihc PC arc I'ew' in number, greatly overpriced, 
difficidl to use and come with documentation 
which IS verbose, contusing and incomplete. 

I might iidd that I here is also a terrific market 
out there for people who can crack IBM 
progtauis so iliai. lor instance . they may be 
installed on a hard disk, (.leff (my brother) lelis 
ine that most IBM programs are pretty easy to 
crack.) 

If the magazine were expanded by one double 
page for the EBM and otherwise remain the 
same size. I think thai ilie interests of the die- 
hard Apple fanatics could be served as well as 
the interests of those of us who wish to move 
on to more powerful machines. 

David W. Rivett 
Canada 



About Autoduel 

This is probably a rather strange letter. It's 
a partial softkey for Autoduel by Origin 
Syslems, Ihc softkey tor Autoduel is very 
similar to the tjltima [V softkey by Mike 
Rodman in CUMPUTlS'f No. 28, Autoduel 
performs fine when you use this softkey except 
for when you wish to go to the Arena feature 
in the game. The disk just whirls on doing 
nothing. Maybe you or some other readers can 
solve this problem. 

t) lNlTiali?e a disk with: 

INIT HELLO 

2) Run Super !OB vl.5 with the Ultima IV 
controller in COMPUTIST No. 28. 

3) type in this program. 

10 PRINT CHR!!;(4) "BKL'N BlUAJT" 



4) Save this as your hello program on copy of 

Autoduel. 

SAVE HELLO 

5) Make the following elianae to llle called 
■■SDA]P" 

BLO.AD SlTJAir 

CALL -151 

I1A1:LA EA EA 

1IA6:EA EA EA 

1IB»:B7 

11BA:E8 

BSAVE SQE P,A$8«e,L$C99 

Dan Agnew 
Fairport, NY 



Waeted 

List 

Need help 

backing-up a particularly 

stubborn program? 

-Send ui the name of tlii:' program dind iii 
mcinufisclurer and we'll add it to our I*4oSt 
Warilyd List, a column (updated each Issue) 
which iiplps In kt;c[: COMPUTIST readers 
informed of ihe piograrns (or which so(tk«ys 
are MOST needed. Send you) requests In: 

COMPUTIST 

Wanted List 

PO Box 110846-K 

Tacoma. WA 98411 

If you know how to deprotect 

uribck, or modify 
any of the programs below. 
lei us know. You'll he lietpinc^ vour fellow 
COMPUTIST readers and earning MONEY 
at the same time. Send the information to 
us In article form on a DOS 3.3 diskette 

Vlinr^i: Calf .i\pplc CiimpiilLT 
Anpli' BiisiiH'ss (jraphlcs Applt' Cempuier 

.laiie .ArfcEr(ini[?s 

Visibli'tid ISIil'IdIuIi 

Lalulysl tjuark. Int. 

tlHtcnburE Jr. & Sr. Microiiwilnii LT15 

I'riiiif PluUtT Priincsdll Curp. 

The HHii(ll«rs Bilii.™ Vallej Sy.vtcm:. 

The ApplL.\ Core; Paris 1-3 Hie PmlL-iMir 

Fun Bunch Univprn 

Willy Byte ... Data ftsk 

(Vunshm Miiniir Sierra On-LtiiL* 

SiK^^Il. ai'[3Jl..rt>L]IECl 

Kobut Wai' Mum: 

ABM Muw 

\])th«!a II DiitaiiiHrt 

Slnrj Trtc ScIin'ifiHtl<^ 

.^[ttnl L.S.A. SthiiliL'^tii- 

Hundicapping i!i;stcni Sports Judaic 

Dallars & Sense Mono^ ru m 

Kcho IHus As!riiniiT Svmiiil's 

t treat (tiixh ('tjuriln Kontl K-jiT Arl't^-t<U}t\ 

Raster Blaittcr ijudjir aiL. 

Otlln CWl'iIj 

Mallei's Mantion DatJiiiiisi 

Brain Bank The Ofecvuuiry 

Ijidrr Firi! ,.>Lviil(in Hill 

CrimsiHi Cnmn ftiijiuin 

Crypt nf Media Sir Teth 

KllD IV LfiillKi Mtcrowjre 



s< 
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readers' sofftk ey A copy exchange 



Kevin Sattorelli 's softkey for. . 




Buuuoft. !iK, 

19808 Nordoff 

Chuiswoi-th. CA 91311 

Reqiiit'«iiicnl$: 

A blank disk 
At leass 48K 

Tfiis nieiKnd requires a RAM carJ w run (he 
game as the title picture is stored tliere. If there 
is no RAM card the game will still run but there 
wiil be rubbi.sh in.stead of the title picture. The 
softkey if. given in a eotikhook faKhkni lo save 
space as the boot eode trace is quirf long. 

The first bout stage starts off with an illegal 
opeode that ignnre^ I lie first two bytes (SS01 
and SB02). The rest of the boot trace you shoiikl 
be able lu folkiw, should you feel like it. by 
liberal use of the monitor "h" command, 

1 ) Boot a DOS 3,3 disk. Type FP to clear any 
BASIC program. 

2) Insert it bltink disk in the 'drive arid type 

INIT HELLO 

to create a slave di.sk with a nuli (empty) 
greeting program (needed later in the softkey), 

3) Go into the Monitor. 
CALL -151 

4) Insert the POOYAN disk into drive one, 

5) Move the initial hoot code from ROM to 
RAM, 

66«e<C6fl».C6FFM 

■■'•-■ I 

6) Load the first boot stage from the disk, 

66F8:ft 
6600G 

7) Turn off the drive, 
C»E8 

8) Alter the hoot code. 

6659:28 
66F8:4C 

2eee<8»e,8FFM 

9) Change where the code is stored, 
2(19D:CA 

2(tB3:H 



Hi) Decode the second boot stage to $A00, 

11) Prepare t<jiiis(e our irtodified boot code, 

89Bi(*A EA 
85E:EA 

12) Modify the boot code to jump to our 

niuiiiie. 

A6C:4C 00 B7 

13) Modify the next boot stage to J u trip back 
to our routine when finished. 

B7e«:A9 4C 8D DA 94 A9 m 8D DB 
8789:64 A9 B8 8D DC M 4C 84 84 

14) Add code to save the text page, 

B80«:.4e m /\2 04 B9 m 94 99 
KMH-M .34 C8 Dfl F7 EE «6 B8 
B8ie:EE 99 B8 CA 08 EE AD 82 
B8J8;Ce 4C 59 FF 

15) Load in the main game and saVi: the text 
page, 

6«88G 

16) Turn off the drive again. 
C»E8 

17) Mpve soiiie code to u safe place. 
A»flfl<2flflB,Z6FFM 

18) Clear the screen and HOME the cursor, 
FCS8G 

19) Load in the tide picture, 

4M<3408.37FFM 

2B:66 

819CG 

20) Move half the pieture to ff.5(W)and the other 

half up to S3QQ@. 

5fl»»<:,3flfl».3FFFM 
jee9<2fl0e.2FFFM 

21) Restore the ende moved in step 17, and pack 
utiier code into unused space, 

2flfl»<Afl8e.A6FFM 

27flfl<8U«e.95FEM 
4S8ft<8A«8.8CFFM 

22) Type in some eode to gei the picture from 
the language card. 

819C:AD 88 Cfl A9 Ffl 8D AF 81 
81A4;A9 20 8D B2 81 A2 29 A» 
81AC:88 B9 88 EB 99 08 28 C8 
81B4:D8 F7 EE AF 81 EE B2 81 
81BC:CA D8 EE AD 82 Cfl AD C4 
81C4:C0 EE F4 93 68 



23) Type in ctide lo move the code to the correct 
places in memory arid put the picture in the 

RAM card. 

4890:AD 81 CB AD 81 Cfl A2 18 
4898: A0 88 B9 80 38 99 89 E8 
4810:C8 Dfl F7 EE 8C 48 EE flF 
4818:48 CA 1)8 EE A2 Ifl B9 00 
4820:59 99 90 1-9 C8 D8 F7 EE 
4828:29 48 EE 23 48 CA D8 EE 
4S39:AD 82 CB A2 89 li9 08 27 
4838:99 00 8D C8 Dfl F7 EE 37 
484fl:48 EE 3A 48 CA Dfl EE A2 
4848:83 R9 00 45 99 80 8A C8 
4850: Dfl F7 EE 4B 48 EE 4E 48 
48.';8:CA Dfl KE AD 57 Cfl AD 54 
4860:C0 AD 52 C0 AD 59 C8 4C 
4868:88 r.8 

24) Add a jump to our routine. 
CFD:4C 08 48 

25 1 Boot the slave disk made ai the beginning. 
BSAVE POOYAN,A$CFD,L$7Dfl3 

26) Type BRUN POOYAN to piay the game. 

s 

p. J. Thompson 'x soflkey for. . . 



The Perfect Score 



Mindscape Soffwai-e 

P.O. Box 506 

Norihumplon. MA 0J601 

RequiremenLs: 

Apple II 

COPYA 

A sector editor 

Twelve blank disk sides 

The Peifecl Score is a huge program written 
in the FORTH language for high school students 
preparing for the SA Is. I 'he verbal sections are 
quite easy while the math is fniiiy difficult. It 
is reasonably priced and not heavily protected. 
Althoufth a hit copier cannot copy it. 
iTiodificalion of the protection code will wipe 
out any probleniK in backing up Hie program. 
Here it is sicp-by-step: 

1) Load COPYA and change the RWTS to 
ignore errors: 

RCN COPVA 

OD 

CALL -151 

B942:I8 

3D0G 

78 

RUN » 
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2) Copy all twelve sides uf The Peifert Scute, 
This may takt; a while because rhe sectors are 
written in a I'uniiy order. 

3) Stan up yotlr seylor editor and ma lie Ihis 
patch on each disk: 

Trac^ Seciw Byte To: 



J0 


$3 


uo 


S4C 


S0 


S9 


Ml 


ID4 


S0 


t? 


i« 


mz 



That's all! This skips rhc proration loaded 
upnn booting and Is used eonstatitly throughout 
itie program , Hnjoy this program and hope for 
a perfect score. _ 

~ ft 

Chcirlea Taylor reviiits . .. 



Alice in Wonderland 



Windham Classics 
Jk One KviukiU Sijuarc 

C'amhrUlf-t.', MA &2i39 

Kequlrements: 

Super lOB \T.5 

One blank two-sided disk 

After reading Allan Migdal's softkev for 
Alice in Wonderland (COMPUTIST No! 29). 
1 rcaiiFxd that 1 had a different version. The 
main ditTerence is thtat all files arc not 



C.ATALOOable by normal methods. Also, tffe 
boot program is HELLO, not STARTUP, 

Step by Step 

1) Ifisiall llie Super lOB controller below and 
use it to copy both sides of Alice in 
Wondarli.tnd. The addi'ess and data epilogues 
have been ehansed from DE AA to FF PF. 

2) Copy DOS from your r)OS 3.3 sywetn 
master to the boot side of the t'opy of AJicc. 
Use Super lOB to copy tracks 0-2 or use 
something like Copy il Plus" "'Copy DOS" 
option. That's all! 

1 would like to present two better methods 
of •■BRUNniQg STARTUP" lliaii the method 
used by Mr. Migdal in his soltkey: 

1) Change the •'hello" program with Copy \\ 
Plus, Tliis automiUically makes the DOS 

changes necessary to BRL'N programs on 
bot)iiiig, 

2) Or. biHH ibu DOS .?.3 master. Then type 

I'OKfc: 4W5 14,52 

and INIT a disk whh the name of the biitary 
"hello" program. To EXEC a text file as the 
"hello" program, use POKE 40514.20, 

controller 

1000 RE«I ALICE CONTROLLER n 

101flTK = LT = 35 ST=15LS=15 ,CO = WR:FAST 

= 1 
1020GOSUB490 : RESTORE ; GOSUB 179 : GOSUB 610 
1039 GOSUB 490 GOSUB 230 ■ GOSUB 510 ■ I F PEEK 

(TRK ) = LI THEN 1050 




104aiK = PEEK{TRK) .ST -PEEK (SCI) ;GOTO.1020 
1050 HOME : PRIMT "COPYDOfJE" : END 
1060 DATA 256 .255 255 355 

controller checksum.s 

1000 - 05&e 1040 - S44C3 

1010 - UW 1050 - S9B42 

1020 - SF372 1060 - J6A53 

1030 - JA259 



P. J. Thompson 's softkey for. 



The Money Manager 



Sterling Swift Fiihlisfiiug Co, 

79m South m-35 

Auxtiii, rx 7S744 

Requireiiieiits: 

Apple ][ computer 
COPYA or equivalent 
A sector editor 
Two blank disks 

The Money Matiager is u simulation of 
business made for educating the user. Although 
the copy priilectiou is not extensive, il isn't easy 

10 bit copy without parm.^. It checks for a totally 
illegal byte between iw-o of the addtetis headers. 

11 wc can avoid this routine, llie program would 
be unprotected. 

1) Load COPYA or any other ijector copier and 
copy both disks on to your backup. 

2) Load up your sector editor and make the 
following patches to both disks: 

Track Sector Byte From To: 



S00 


S0B 


S58 


I4C 


SEA 


$00 


S0B 


S59 


JE5 


m 


S00 


S0B 


S5A 


SBC 


im 



p. J, Thompson 's softkey for. 



i 



Good Thinking! 



Hoffiniitt Editcational Systems 

Requireoieiils: 

64K Apple 11 

A sector editor 
Twelve blank disk sides 
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Sieve and Rod Smith \ patch for.. 



Mockingboard 
Rescue Raiders 



Good Ihinkingl is a new program written 
in Pascal designed lo impruvc language among 
young kids. It can be copied normally but upon 
hofitijp the copy will iwl be aeeepled. ATler 
scanning ihc disk for a BD SC" CM (I. DA 
$Cfl8C,X), which Is a eomiiion inslmeiion used 
to read bytes olTthe dixk. I made a small patch 
which bypiisse.s ihe protection. This softkej is 
for Level One programs. 

Here it is siep-by-step. 

1) Load COPY A oi any oiht-r full disk copier, 

2) Copy all twelve sides of the Goad Thiiikingl 
disks Ifyou want lo save a liiile room you can 
double side your disks. 

3) Bool up your sector editor. 

4) On each disk make the following putch ai 
byte SB6 from $4C to $60. This will be done 
on a different .'^ectar for each disk. Here is a 
list of the disks and the corresponding sector 
tfl niodify: 



Df^ti 



Trk Sect 



CAUSE 8 EFFECT 


$1C 


$6 


DRAWING CONCLUSIONS 


$J0 


J8 


PREDICTIfJG OUTCOMES 


SIF 


$A 


GENERALIZATIONS 


SIE 


$A 


MAIN IDEA 


SIF 


$A 


TOPIC SENTENCES 


$20 


?4 


CLASSIFYING 


JIE 


$6 


COMPARISON 


$1F 


IE 


ANALOGIES 


$10 


S6 



If these sectors do not contain a 4C F8 M 
(J MP SfflOFS) at byte SB6 then it i.", the wrong 
sector. Either check again or sciireh your disk 
for a BD 8C C0, Make sure the siictor in which 
yoLi ti.vund those bytes are t)n a track greater than 
$3 and then do your patch. On ihe llrst two 
track.^ these bytes are used constantly for the 
disk apcratiiig system. Ilopefuliy you won'i 
have to go through this mess but the softkcy 
should work either way. 

— a 



Keqiiirenieiits: 

COPYAable version of Rescue Raiders 
Scctot Editor 

Tho^e of you who own Mockingboards may 

have been a b\( irustrated when after following 
the softkey for Rescue Raiders m COMPUIlSf 
No. 16, When 1 tried it. I found that the 
program froze at the main screen. 

Well, as it turns out, the program checks ior 
a Mockingboard. but does tiot do anything lAith 
it after it's found one. except hang. Here is an 
easy patch to apply to your backup that w'ill 
eliminate the ehcek and play the game without 
having to remove your Mockingboard. 

With a sector editor, apply these ehanges th 
your backup: 

Track SeclOf Byts Change to 



S15 

J15 



S01 
$01 



S05 
$05 



SC0 



% 
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Soft key for... 



Hi-Res 



by William Hinger 



On-Line Sv<il<'iJi\ 



Rwiitirements; 

Hi-[<cs Cribbagc 
A blank disk 

This game was released in 1980, and at that 
lime there were a tew holdouts who were still 
using DOS 3 2 in their mathines. It is not 
surprising, therefore, that the disk was released 
in 13 -sector format with a special boot sector 
tor DOS 3.3 systems, In fact, the disk has a 
completely normal DOS, and if yoit imernipt 
the loading process with a fJJCI . you can 
caMlog [he disk and snoop through all the files 
there. 

If you load and list the Applesoft file named 
CRIBBAGE, you will see that it Inst loads and 
runs a binur>' file named HiRHS. I'his file turns 
on the hi- res graphics and draws the tiilc page. 
This nie is not [leeessary as it is later completely 
overwritten when the next llle is loaded. 

A binary file niimed BCRIBBAGE i.s then 
loaded ut address SDM with a lengtli of "ETFFF, 
which means that i! extends in memory to 
$8CFF. (Locations SAA72 and $AA73 in DOS 
contain the start address of the most recently 
loaded binary file, and locations $AA60 and 
SAA6 1 contain the length of the most recently 
loaded program or file.) 

Then a binary file called EXTRA is loaded 
at S8DWI with a length of ,S6M. They obviously 
cotild have made these one file with a simple 
patch to the save length parameter in DOS 
(A964:FF lets you B.SAVE more than 32K. at 
a time), but they didn't. 

The last file loaded is a bmary file named IF 
which is loaded at S.3fl0 with a length of SA. 



After a couple of pokes, this file is caUed atid 
starts the program. The first instruction itt this 
file is a JSR S7D64 This routine simply clears 
all memory between $8(W and SCFF to zeros. 
The ne.\t instruction. JSR $S7(M, is the one 
which prim.>i the menu and executes the 
program. 

Now, what we would tike to do is save these 
flics as one binary file which we can FID to 
another disk and execute with a BRUN, This 
will work as long as we have the original disk 
in the drive. Bui if we have transferred the files 
[o another disk with a file transfer utility (such 
as MtJFFIN to transfer the files to a 16 sector 
disk), the program will try to access the disk 
and die a fast death in the tniddle of the menu. 
So we need to look a little further. 

If you look at the routine which starts al 
S870B, you can see that it repeats a cycle where 
it sets VTAB and CH and thdn calls a routine 
(at $7F27) which prints a line to die screen. This 
continues until just before it would pruit menu 
chi)ice5. Then insieadof a JSR to S7F27. there 
is a JSR to $8FE0. This is the protection 
routine, such as it is. It first does a call to a 
subroutine at S8FO0 which unscrambles the 
code at $9006. calls the code at J9O00. 
reserambles the code at $9000 with another call 
to S8F0O. and then finally modifies its own code 
so that the next lime ibe menu is printed, the 
call to SKFE0 encounters a JSR S7F27 and RTS. 

Exa mi nation of the code at S'MVIi!) will show 
that the program first loads track 0, sector 
itito page 3 and then track 2 . sector C into page 
91 . Since 39IWfi is in the middle of the EXTRA 
file, we can save this with the rest, but we need 
to make arrangements to save the code at $300 
inside of our file. We can do this by moving 
it to $C0fl and then writing an entry routine 
which will reposition this code before calling 
the program. 

One more point needs to be addressed here 
The menu choices which save a match and 
continue a previou.^ly saved match need to be 



eliminated. When I chose to update this 
program, I wanted it to he able to execute under 
eldier DOS 3,3 or ProDOS. lliesc routines read 
and write .sectors directly to disk using direct 
calls to DOS 3.2 RWTS routmcs. and since a 
match is less important to me than just playing 
the gainc, I chose to eliminate these routines 
entirely. This involved changing some of the 
ASCII in page S80 (iiiemury $8M<i)) so that 
these choices no longer show up, and then 
changing the program so that il will nol accept 
these choices. This is where most of the code 
you will need to enter to unprotecl this progrum 
will be placed. 

I then wrote a short routine which m<wed the 
code to page 3, set the graphics display, set $4 A 
and $48 in zero page to the values originallv 
.set by the Applesoft prttgram, and then jumped 
to $300 to start the program. After saving the 
code as a binary file. I tried running it. 
Vol! a! When ( ran the program, it looked 
great and ran fine on my old Apple ||. But 
before considering the task to be complete, 1 
usually try il on ihc kids' //c also. Good thing 
I did. The program died. 

Now the only thing ihai ! could think of that 
would allow the program to run on my antique, 
yet would nol allow it to run on the new //c 
would normttlly involve direct calls to a part 
of the monitor ROM which was changed during 
ihe various incarnations of ihe Apple |[ family. 
.So 1 iraced ihrough about 10 muiines to find 
what 1 thought t was looking for. The culprit 
was found al $7E54 and started with an I. DA 
SE00(). I'his was used as an ID byte to 
determine what fiavor of BASIC was resident. 
In my old machine, ApplestUi would telurn S00 
and Integer would return .$85. Since I do have 
Applesoft ROMs in the machine, this would 
return a S0fl and all would be fine. But '5Ffl06 
on the //c would return a SS9 and the program 
would mf^iiakc this for Integer BASIC and die. 
Since I would always be running the program 
on a machine containing Applesoft. I disabled 
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Cribbage 



the choice by having the routine load S00 into 
I he accumulator instead of loading an ID byte. 
Ii now worked fine on boih of my machines. 
If by chance you are still using an Apple ][ widi 
the Integer ROMs, you need to skip the step 
which changes the code at S7E54. The step by 
step process follows, so do and enjoy! 

Step by Step 

1) Initialize a blank DOS 3.3 disk with an empty 
HELLO program: 

NEW 

INIT HELLO 

2) IiLscn your original Cribbage disk and boot it: 

PR#6 

3) When the program has displayed the entire 
menu and the disk drive has quit spinning, 
interrupt the program by pressing Reset, 

4) Enter the monitor: 
CALL -151 

5) Protect page 3 of memory from the boot: 

6) Now boot the slave dbk ytm created in step I : 

7) Modify the menu to delete the SAVE 
MATCH and CONTINUE MATCH options: 



CALL -151 
8088:CF 09 
8»9«:C7 AB 
8»98; C3 D4 
8«Ae:Ae 8D 
89.\8iC4 Alt 
80Btl:A« M) 
80B8:Ae Aft 
8BCft:Att M 
8BC8:A« A» 



C5 D2 
C9 CE 
C9 CF 
B3 Aft 
Aft Aft 
Aft Alt 
A«( A« 
Aft Aft 
Aft Aft 



CI D4 
D3 D4 
CE D3 
Al) AH 
A(t AB 
Aft Aft 
8D Aft 
Aft Aft 
Aft Aft 



C9CE 
D2 D5 
Afl Aft 
C5 CE 
Aft Aft 
Aft Aft 
Aft Aa 
Afl Afl 
Aft Aft 



8flDft:Aft Afl Aft Aft Afl Afl Aft 8!) 
8»D8:Ae Aft Aft Aft Aft Afl Afl 8D 

8) Delete the jtimp to the protection routine: 
87BA:27 7F 

9) Modify the choice subroutine to rellcct the 
new menu: 

87C4:B4 
87E»:FF 

87E7:FF 
87EK:fl2 
88fl8:BF 9D 

10) Enter a short startup routme: 

BCfl:8D 56 Cfl 8D 52 Cft 8D 54 
BC8:Ce 8D 57 Cft A9 ftC 85 flft 
BDB:85 fll 85 ft2 Cfi flft DB FC 



BD8:C6 Bl l)B 1-8 C6 B2 DB F4 
BEfl:A2 ftB Bl) flft BC 9D flft fl3 
BE8:CA I>fl F7 A9 Bfl 85 4A A9 
BF0:08 85 4B 4C flU 03 Ofl 



lili 



11,1 If your machine is a )[ Plus or newer, or 
if you have replaced the Integer ROMs In your 
][ with FP BASIC ROMs, make the following 
change; 

7E54:EA A9 flft 

12) Save the new file: 

A964:FF 

3DftG 

BSAVE CRIBBAGE,. \$BCe,L$874» 

That's all there is to it. This 138 sector binary 
file can be moved using FID from your DOS 
3.3 System Master. 

i 








3 






/ 






/ 






S 






V 


+ 




+ 






-1- 


* 




* 


♦ 






G 






e 






dL 






/ 







15-2 
15-2 
RUN- 3 
RUN -3 
RUN- 3 



RUN- 3 
PflIR-2 
PflIR-2 
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softkey for... 



Olympic 



by Marc Lirctte 



MiiiiiMiJi Ciif/> 




10700 Norilwp 


Wax 


FOB 97200 




Bc'ilevue, WA 


98m9 



RequireinenlK: 

Su|X-i iOB vL5 

Apple II Plus or cqiiivalem 

Oris; disk drive (two arc preferred! 

After Several attempts at trying to unprotect 
my Olynipif Derathltm disk I wrts only able to 
unproicLt i[ lust week. The iiiain reason why 
! couldn't unprotecl Ofynipic De(;athlon was 
bet a II St." is uses an old siystem of storing the 
intbrmaiion on the disk. After boot tracing and 
examining ihc read routine. I noticed that the 
tracks on the disk wciv written with 4 & 4 
encoding. Slundard DOS 3.3 and ProDOS uses 



6 & 2 encoding. Refer lo Beneath Apple DOS 
or ProDOS by Don Worth and Peter Lechner 
for a discussion of 4 & 4 encoding versus 6 & 2. 

Because the disk uses -1 & 'I encoding, it can 
only store 1 1 scetors per track. 

The method of unproieeting the disk ts to tlrsi 
tranfcr tlic disk to a DOS 3.3 formal j 6 & 2 
encoding) and then change its read routine to 
use RWf S instead of reading 4 & 4. First I u.sed 
I lie gocd old b(K>t trace to capture the Olympic 
Decathlon read routine. Then 1 wrote a Super 
IOB vl.5 conlroller that uses (he Olympic 
Decathlon's own read routine and normal DOS 
for writeii. Tht; resulting disk would not boot. 

After examining the boot process of the 
original di.^k some niore I decided that I would 
have to write my own loader routtne and modity 
the read routine on the copy of Olympic 
Decathlon to use standard KWI S. So alter some 
revisions to my controller and the creation of 
my LOADHR ("tie. il worked! 

The Cook Book 

1) Key in thtf LOADER hexdunip and the Stipe r 
IOB controller using die instructions on the 




-K" Olympic 
Decathlon ^ 



in.side IVont cover of this maga.^iiie and ^avc 
them wtih: 

BSAVE LOADER. A$90e»,L$6D 
SAVE CON. OLYMPIC 

2) We will now boot code trace your original 
Olynipic Decaihkm disk to capture its read 
routine. First write protect your nriginal and 
enter the monitor. 

CALL 151 

3) Cpoy ihe disk controller card ROM in slot 
6 to RAM. 

96(M1<C690.C6FFM 

4) Change this relocated boot ROM to put us 
into the monitor instead of executing the next 
Stage of the boot. 

96F«l4C 59 FF 

5) Execute this modified Boot C and turn off 

the drive. 

C«ES 

6) The disk drive will start up and clank. The 
cursor will then reappear. Now track 0. sector 
is loaded into rneniory. Change Boot 1 at 
SBS0B to put as into the monitor instead of 
exeeuting Bool 2, 

826:4C 59 FF 

7) Change Boot PI to load track 0, sector H into 
S9800 and execute Bool 1 at SOSTO. 

9659:98 
96f8:4C 91 98 

H) Execute Boot and I and turn off the drive. 

969eC 
CflFJi 

9) Now Boot 2 is loaded into mcinory. This is 
Olympic's read rouiine. Boot your Super IOB 
disk and save this read routine. 

BSAVE RWTS.OLVMPIC ,A$89e9,L$9e0 

10) We will now creates slightly modified boot 
strap code to load in Olympic Decathlon. Enter 
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t 



Decathlon 



tlie monitor md move the bout strap code to 
S360O. 

CALL -151 
36tte<B60«.BFF'FM 

1 1 ) Mtikc thL- rollowing modit'icatjoiis lo ihis 
code NO thai it will load Giympic PecathloO 
uurrfc'ily . 

36FE:B6 

.1715:(*1 

371A;9F 

.17,1F;81 Ce 20 M FE 

3748:08 89 

37Ae;C8 ftA Dft »a Aft «F 

37AC:EE 

37Ffl:ft9 

37E7:8A 

37EB:flfl 

37re:ee 

12) Rtturn tci Appieson and save (his moUificd 
boot strap to your Super lOB disk, 

cm 

BSAVE RVVTS.NORMAL .A$36ee,L$A0e 

13) Use [Itt; Super lOB conirollcr w copy 
Olympic Decathlon Nott* ihal lifter track S22 
is wriiien, you will be askfd m in.s(;rl ydur Super 
lOB disk. This is so the i;ontrollcr can BLOAD 
Ihi.' Tik';, you just created and write thcni to your 
dcproteticd copy. 



LOADER 


9000; 


A5 0C 4A 8D EC B7 A5 0D 


J18DD 


9008; 


SD ED B7 A5 08 80 Fl B7 


JOBSF 


9010.: 


A9 09 8D FB B7 A5 03 85 


S53AB 


9013. 


n E6 03 EE Fl B7 EE ED 


Jfi4DC 


9020: 


B7 AD ED B7 C9 0B D0 0g 


S980O 


9023. 


A9 00 SD tD 67 EE EC B7 


S9F92 


9030: 


CS 02 AS 02 D0 E5 AD EC 


t73A4 


9038: 


B7 85 05 AD ED B7 85 06 


$0544 


9048: 


A9 81 8(1 F4 B7 A9 B7 A0 


I8FA0 


9046- 


E8 20 B5 B7 AC ED B7 88 


S76B1 


9050. 


10 05 A0 0A CE EC B7 8C 


SB7E7 


9053: 


EO B7 CE Fl B7 C6 03 AS 


i47DJ 


9050: 


03 D0 E2 A5 05 0A 86 0C 


SB8BC 


9068; 


AS 06 85 0D 60 


i5BE7 



controller 



000 REM OLYMPIC DECATHLON 

0i0FORA = 936TO960 . READX : POKE A ,X : NEXT 

02aTK=l ST=10 LT = 35- LS = 10 CD = Wfi.POKE 

900 10 . POKE 907 ,306 . POKE 916 ,144 
i30GOSLJB490 POKE 955 ,TK - 2 POKE 941 ,22 

+ 66 w (TK < 33 ) : CALL 936 
040. IF TK- 9 THEN FOR A =9! TO 93 : POKE 10752 

+ A .234 : fJFXT : POKE 10850 .0 
050 GOSUB 490 . FOR A - TO 7 : POKE BUF , 49 + 1 1 

* A :MB^39 4- U * A 
060 GOSUB 610' :TK = TK + 1 : IF TK< LT THEN NEXT 

. GOTO !030 
073 AI = CHRS (7 ) + ■' I NSERT" SUPER' I OB" DISK" 

. GOSUB 470 , HOME : PRINT 
080 PRINT CHRJ (4 ) "BLOAD" 

RWTS OLYMPIC, AS2700" . PRINT CHRJ- (4 ) 

"BLOAD' LOADER. AS2E00" 
090 PRINT CHR$ (4 ) "BLOAD" 

RWTS NORMAL, A$ 3000" 
100 AS = " INSERT* TARGET' DISK" IN' DR I VE'"t 

STRS (D2 ) . GOSUB 470 HOME 
UB SI = 9 TK = : POKE BUF , 57 : MB - 48 : GOSUB 

510 , POKE 907 .238 



1120 POKE 916 ,175 ,ST^Ii) . POKE BUF ,44 :HB = 
48 , GOSUB 610 TK^l : POKE BUF .39 ;MB = 
44 : GOSUB 610 

1130 HOME :>RiNT'"THAT'S' ALL" FOLKS'" : END' 

5000DATA169.96.133.il 169 77 133.3.169 
,39 133 



5010 DATA 8 


169.0,133 


,7.133,1.3,169.0,133 


,12,76 


,0,1-4.4- 


- _ _ 


1.0010PRINTCHRM*) " 


BLOAD' RWTS. OLYMPIC" 


controller chccksatm 


1000 


- S355E 


1090 - J0E25 


1010 


- SF.C74 


1100 - $643E 


1030 


- SF80E 


1110 - .J035A 


1030 


{EAA7 


1120 - S24A3 


1040 


- 15610 


1130 - S4597 


1050 


- SDC04 


5000 - 5E913 


1060 


- SFE0F 


5010 - SA9BE 


1070 


- SE857 


10010 - SC0E4 


1080 


- S730A 


» 



ON YOUR MARKS 
SET. 
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revisiting. 



F-15 



by Jim Wallace 



12® Uikcfiant Driw 
Hunt Vuikx. MD 21&30 



Ri'tliiiremeuts; 

A blank disk 

?;upo;r lOH 1 .5 

Sector editor foptioti;i[) 

A copy program whith will c»py specific tracks 

(optional) 

As Mic'hat'l Ferrtiru and Ken Burnell (Input. 
rOMPlJTtST Nns 28 and 29) indienfe^ there 
are olhtrr version.s t)r F-15 Strike taglc released 
which ;irc dil't'oretii from Larrv J;istinowicz's 
(COMPUTE r No. 24). [ also tried Larry's 
softkey proeedurc with no success, Hi,s article 
wus helpful, however, in softkeying ihe V-\5 
I have. Perhaps sonie of niy Imdings will help 
in softkeving still other versions. 

A quitt; eheck of the disk using CIA revealed 
a normal DOS 3.3 ftirmat except traek S22 
whmh appeared {o be empty anyway. So I made 
a copy of F-15. tracks SM through $2 1 . i used 
this copy during my investigation and used the 
original for the final .wftkcy, 

I decided lo loi^k for a catalog track, whose 
loeaiion b usually indicated in normal DOS 3.3 
on track SOI , sector %m. byte S01 Finding the 
value SI 5. 1 initialised a biaak di.sk with DOS 
3.3. used a sector editor to ehange byte $01 of 
sector $0B. (rack 501, to SI5 and then rebooted 
thi.s disk. The F-15 copy coidd then be 
CATALOGed and the files' loaded. 

[ wa.s interested in examining any file which 
loaded into page $02. assuming that the 
l^rotection would at least be 'iimilar to Larry's 
version. The file "'AS", located on track 3i 10. 
.sectors .TOC and SdD, loaded into page S02, 



.A iter loading it. I found that ir also stored %C& 
at $0201 if a copy of the disk is detected and 
SDB if no error is encouniered. To defeat this 
clieck, [ sinipij changed the $C0 to SDB (two 
locations (track .$10, sector SCIC, bytes ?90 and 
$9E) on the copy of F-i,'5 which I had Just 
made). 

Having made these changes, the game would 
progress up to the point of requesting you to 
enter a code number (explained in the F-15 
manual). After the code was entered, the 
program bombed with a "HARDWARE 
FALLUREl" message. Noticing that disk access 
occurred after the ct>de wu.'i eiiiered, 1 suspected 
a nibble count or some unique signature on that 
proliteiu track $22. So I rebooted and 
interrupted the process with a modified ROM 
(see previous issues of COMPUTIST) to .wareh 
for disk access code {.some reference to hxration 
$C08C). This led me to the actual nibble count 
subroutine located from 15303 through S537B. 
(I latei checked ilie catalog atid found file 
"SC.N.DTA" loaded into pages S.S0 through 
S53. Howjever. don'i ho(her trying lo load and 
read it (it's encoded and gets Exclusive-OR'cd 
after loading to tevea! sensible data)). 
Backtracking, I found the process begins at 
S5000. Without any furdier analysis of ihe code, 
I simply gave it a .^hot of "IS 60" (encoded, 
of course) lo indicate "no errors found" and 
return to the caller. No luck. Apparently there 
was something the subroutine generated which 
the caller looked for upon return. 

Looking ihroagh ihe routine, 1 found u couple 
of places where ."62 1 is loaded and then ihe 
program jumps lo what appeared to be its own 
SEEK subroutine (to move the disk arm to a 
specific track. See COMPUTIST No. 22, Super 
lOB 1.5 "Half-Tracks" for more on this 
subject). 



J5008- 


Ds AA 




5500A- 


95 DE 




I500C- 


AA 




5500D- 


D5 AA 




S500F- 


AD DE AA 




$5142- 


AD 05 00 


IDA S5005 


S5145- 


20 B9 52 


JSR 15289 


55148- 


AD 05 50 


IDA S5005 


S514B- 


20 9B 51 


JSR S519B 


$514E- 


20 7E 51 


JSft S517E 



When a program uses a SEEK; subroutine. 
9.5 times out of 10 (dcclmal-not hex) it's using 
half-tracks. A quick check of the original disk 
revealed a fully formatted track S21.5 with 
seemingly empty scctor.s. As a matter of fact, 
tracks $21, $21.5, and $22 appear identical- 
and I do mean identical! Track $22 is forinatted 
with a track ID ol $211 

After locating these tracks, the actual nibble 
count subroutine counts a specific number ol 
bytes, then looks tor a "9A 96 xx DE AA" 
sequence. 



S6000- 18 


CLC 


S5001- m 0F 


BCC 55012 


S5a03- 9A 




S5a04- 95 21 




$5006- 01 G0 





S532A- 


A0 54 


LDY n54 


S532C- 


A9 00 


IDA *I90 


5532E 


ED 8C C0 


LDA SC08C,X 


S5331- 


10 Fg 


BPL S532E 


Read 154 + 


$EF bytes: 


S5333- 


EA 


NOP 


S5334- 


3S 


DFY 


$5335- 


D0 F7 


BNE $532E 


S5337- 


BD 8C C0 


LDA SC08C.X 


S533A- 


10 FB 


BPL $5337 


SS33C- 


EA 


NOP 


$5330- 08 


INY 


S533E- 


D0 F7- 


BNE $5337 


S5340- 


BD 8C C0 


LDA $C08C.X 


$5343- 


10 FB 


BPL $5340 


$5345- 


A4 2A 


LDY I2A 


$5347- 


00 06 


BHE I534E 


15349- 


CD 03 50 


CMP 55003 


I534C- 


D0 3C 


SNE }537A 


$534E- 


BD 8C C0 


LDA JCBSCX 


$5351- 


10 FB 


BPL $534E 
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strike Eagle 



15353- A4 2A 
$■5355- D0 05 
$5357- CD 04 
- . Reao and 
bytes to 
S535A- Da IE 
S535C- BD 8C 
S535F- 10 FS 



05 



LDY 
BNE 
CMP 



compare 
"9A 96 
BNE 



C0 



S5361- 
45362 

J5363- 



EA 
EA 
EA 



S5364- BD 8C 
$5367- 10 FB 
$5359- CD 10 
$536C- 00 0C 
$536E- BD 8C 
$S37l- 10 FB 
$5373- CD 11 
$5376- 00 0? 
$5378- la 
S5379- 60 
S537A- 38 
S537B- 60 



C0 



50 



G0 



50 



LDA 
BPL 
NOP 
NOP 
NOP 
LDA 
BPL 
CMP 
BNE 
LDA 
BPL 
CMP 
BNE 
CLC 
RTS 
SEC 
RTE 



$2A 
S535C 
$5004 
the next 
XX DE AA" 
$537A 
C0SC,X 
S535C 



tive 



C0SCJ 
S5364 

$5010 
S537A 
IC08C 
S536E 
55011 
S537A 



Hnimimii, Tht- DE AA is the epilog of a 
iiormul DOS 3.3 sector. Checking the sectors 
on these tracks ai>ai(i wiih CIA Lingui.st 
revealed the "9A % 9A DF. A A" at ihe L-nd 
nf the sector $06 on each of ihust; similar tracks. 
It's easily ovcrlwiked in the sea of "96^" 
itnlesi you're looking for it. 

Well, if 1 couldti'i ignore the whole disk 
check mutinf. at least I could skip iht ucliiul 
nihtile count. At $5151 tile program branches 
to lE-ilHR if a goixl nibble count has occurred 
and steps arc executed to mdieatc no error. The 
sole indic:iiion of no error is that the A register 
must coiiniiii $&ii when returning to the caller. 
The remaining codt between S5165 dnou^ii 
$5I7A will scl up other condiiiani; needed upon 
return whether an error was detccied or nut, 

■With this inl'onimiion, I decided to change 
the cotte on page S51 a^s needed to skip the 
actual nibble count. As mentioned curlier, this 
routine is encoded on the disk. Each page ol" 
the rotjtinc must be EOR'eU wiih a different 
value for decoding. In case any of you want to 



experiment furthet, they are listed below. 
CAUTION: The bytes you see tn RAM are 
offset by a factor of +4 when using your sector 
editor. For example, when you read in page $50 
from track SMT, sector $07.' byte S502O that you 
see in RAIV3 will be byte number $24 of your 
sector editor-nol byte number S20. When DOS 
3.3 Stores binary files to the disk, ii precedes 
the actual data with a iwo-bytc address and a 
two-byte length. This "moves" ihc rest of the 
data four bytes down the file. 



$10 sec 



S9F 



JC0 
$C0 



SOB 
SOB 



Page 


Value 


$50 


$A5 


$51 


$75 


$52 


$39 


IS3 


I6E 



(One item I didn't follow through on was 
figuring out why immcdiaicly after decodins, 
page numbers id the code are $60 through S63, 
then changed to S5f) through $53 prior to 
e\eculion. A[iollicr Caution: lake heed, ye who 
want to experiment further!) 

Making The Copy 

The sector editor method for making a F- 15 
backup is fu.sicr. Nearly everyone has a .sector 
editor, but for anyone who dow not. use the 



3) Be sure to wrue each sector back after 
making the changes. 

The Super lOB Method 

1) Initialize a blank disk with DOS .'i.S. 

2) Install the F-15 controller at the end of the 
article iiiln Super lOB and use it to copy tracks 
STO through .$21 of the r^riginal disk. Supet lOB 
will make the neccssarv sector edits on tracks 
sec and $10. 



controller 



-15 STRIKE EAGLE CONl 
'LT = 34:ST=15:LS=i5 



CD=1VR.FAST 



1000 REM F- 
1010TK = C 

= 1 
1020GDSUB490 ■ GOS1IR610 'Tl =TK TK = PEEH {TRK 

) -1 : RESTORE GOSUB 310 .TK = T1 
1030 GOSUB 490 . GOSUB 510 ; IF PEEK (TRK ) = LT 

THEN 1050 
1040 TK- PEEK (TRK) ST-PEFK (SCT) '[5OTO1020 



1050 HOME PRINT "DONE 
5000 DATA 11" CHANGES 



END 



Super lOB meth(xl described later 




5010 DATA 12 .6 ,49 57 .12 .6 .50.45 


1) Copy the F-15 disk, tracks %m through .$2 1 . 
or, if you can't speciiy tracks, ignore errors on 
track $22. 


5020 DATA 12 ,6,51 .20,12.6.92,109 
5030 DATA 12 ,6 ,93 .220 ,12 ,6 ,94 ,110 
5040 DATA 1? .6.95 248 ,12 ,6 96 ,147 










5050 DATA 12 5 ,97 ,20 16 ,12 .W 219 


2) Use your sector editor to 


make the following 


5060 DATA 15 .12 ,lba ,219 


ch.^nges; 












controller cheekfiiinis 




:Bvte 


From 


To^ 




Track Sector 












1000 - $3656 5010 - SSESE 


IC $06 


$31 


$55 


$39 


1010 - $0715 5020 - JS50a 




S.^7 


$R7 


$20 


1020 - SCE56 5030 - $D7AB 




$5C 


$55 


S5D 


1030 - $7CEfl 5040 - $1CA8- 




I5D 


S53 


SDC 


1040 - $D1CC 5050 - J3F5D 




$5E 


S17 


S6E 


1050 - $33EF 5060 - $8768 




$5F 


$39 


m 


5000 - $E34A „ 




$60 


$37 


S93 


* 
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Exploring ProDOS by Installing a... 



CPS €lock Driver 



by Paul Blumstein 



It you own a Mountain Computer CPS clock 
card, this article will show you how you (.-un 
use It as a I'roDOS compatible clock. If you 
do not have a CPS clock, this article will 
provide you with insighi inio some ofihe inner 
workings of ProDOS that you will find useful 
to you whether you wish to write assembly 
language programs or as a .start i[ig poiiu for 
further exploration. We shall explore ProDOS's 
Machine Languagi; hiterface and itj. Global 
Pages and wc will discover how a system 
program is called and relocated. 

Background 

About four years ago. Mountain Computer 
Incorporated revolutionized the Apple 
compatible peripheral card industry by 
introducing the "CPS Muliitiinction Card." 
This card contained a bi-directional serial 
interface, a parallel interface and a 
clock/calendar. Its name, CPS, stands for its 
three Ixinetions: Cl(x.'k. Parallel and Serial. This 
card was popular for two years until ProDOS 
arrived, maicinfi the eloeii function of little 
value. Many people still are using these cards 
to drive their modem or printer or both. 

Why A Clock? 

An excel lent reason lor owning a ProDOS 
compatible clock is tliai ProDOS wilt 
automatically place the date and time in 
directoi^ entries. That information tells you 
when each file was first created and w^hen it wa.s 



last riiodiiled. Have you ever had two or more 
files with the same name on two different disk.s 
and wondered which one was the latest version'.* 
Or have you ever needed to know whether your 
backup lllcs were current? Having a clock 
solves these problems. 

Another sjood reason to own a clock is that 
some appliciilions will use your clocl: to make 
your life a little easier. For example, Apple's 
AppleWorks program in Ilia My prompts you for 
a date. If you have a clock, it defaults to the 
current date. If you don't have a clock, then 
it defaults to the last time you manually entered 
a date. Without a clock, this means [hat you will 
have Lo re-enter a new date every time you bwM 
on a different day. With a clock. AppleWorks 
will also display the time that your tiles were 
last updated in addition to the date. 

Word Juggler, a word processor by Quark 
IneorporHted, is jinolher good example II has 
functions that automatically pnnt the date and 
time on your documents. When you use these 
functions without a clock, you must manually 
enter the date and time each time you hoot. 
Wlien you do this, the lime never changes. 
More and more ProDOS applications are being 
written to make use of a clock. 

It is especially fru.strating when yoii have a 
clock inside your computer that you can't u.sc. 
This frusiriition led me to create a clock driver 
thai would iteeess a CPS clock and ItKil ProDOS 
into thinking that 1 had a ProDO.S compatible 
clock. By the way. you probably have noticed 
the name Thunderclock mentioned in ProDO.S- 
relaled literature. Thai is because Apple 
designed ProDOS to he enmpatihle with ihe 
Thunderclock clock card made by 
Thunderware, Inc. All of the clock cards since 



that time have been designed to be 
Thunderclock compatible. 

How a Program Ac«;s.st;s the Date 

Ihe creators of ProDOS decided to create 
subroutines that could be accessed in a way that 
would be compatible across future versions. 
One of the problems with DOS 3.3 was that 
programmers accessed its subroutines directly. 
That meant ihai Apple could not make any real 
[iiodifieations to DOS since everyone expected 
ihat everything would always be in the same 
place. ProDOS lakes two steps to solve this 
problem: the Machine Language Interface 
(M LI), and Global Pages. 

The MLl i.s a subroutine that has only one 
entry location; SBF00. An icssenibly language 
programmer executes a JSR instmction (similar 
to a BASIC GOSLIB or CALL slatement) to this 
location and passes parameters indicating what 
he would like PraDOS to do for him. For 
example, each of the ProDOS commands (like 
OPEN) have equivalent MLl calls. There are 
additional system lunetions thai are only 
available through the MLl The MLl call to get 
the system date and time (called GET__TiME), 
which we are about to explore, is me ejcample 
of this. 

The System Global Page ts page SBF 
(locations .$BFM through 5BFFF} This pag;c 
contains values, such as file butter addresses. 
ard IMP (jump) instructions (which are 
equivalent to BASIC'S GOTO statements). 
These instructions jump to various areas of 
ProDOS. ihe BASIC Interpreier (which is the 
interface between ProDOS and Applesofi) also 
has a Global Page (page $BE), By having fixed 
locations on these Global Pages, both ProDOS 



16 



COMPUTIST Mo. 35 



iiiul the BASIC Imcipretcr cun come out with 
new versions without and yiiy program tiiai di«s 
not violate the rules will not be affected. New 
versions of ProDOS and tlie BASIC Interpreter 
merely change the values stored in these 
locations, but the locations, themselves, never 
change. If you are inti; rested in more detail.s on 
the MLI and these Global Pages. I recommend 
Beneath Apple ProDOS by Don Worth and 
Pieter Lechner (Brady Communications, Inc.. 
1985, S19.95). 

That brings u.>i to the clock. When any 
ProDOS program wishes to retrieve the date 
and/or time, it doe.*; it by issuing an MU call 
(JSR SBFeC). By convention, this call is 
followed by a one byte function code and a two 
byte address that points to the location of a 
parameter li.st. When ProDOS is done with the 
call, program e seen t ion continues at the address 
immediately following the three bytes. The 

GET. TIME function code is $82. Since this 

call does not have any parameters, the two byte 
address after the function code has a value of 
zero. The assembly language code to get the 
system date and time is simply; 

JSR SBF00 call the MLI 

■HS 82 GET. TIME code 

.HS S000 address of parmlist 

LDA. . . continue program 

PixjDOS responds by placing the curicnt date 
and time, in binary, in locations SBFW through 
SBF93. The lime is stored in a 24-hour clock 
format with hours placed in location $BF93 and 
minutes placed in location $BF92. The date is 
more complex. The 5 right-most bits (known 
as the Lea>it Significant Bits or LSBsj of location 
$BF90 contain the day of the month. Since we 
number bits from (on the right) to 7 (on the 
left), this would be bits ffl through 4. The 
number of years since 1900 (i.e., 1986 = 86) 
tKcupy bits I thniugh 7 of location SBF9 1 , That 
leaves bits S thiough 7 of $BF96 to contain the 
LSBs of the month and bit of $BF9I to contain 
the Most Significant Bit (MSB) of the month. 

Confused? Let's try an example u.sing 
September 15. 1986 as today's date and 1 1 :45 
pm as the current time and llgurc out how this 
is stored (see Table 1). If you were to examine 
locations SBF90 and SBF9I with the monitor, 
you would .see that it contains the values 52 F 
and SAD. respectively, which is consistent with 
the bit pattern above. If the system doesn't 
contain a compatible clock, the values at these 
locations do not change. They are initially ^ero 
and are changed whenever you "set the clock". 
That is why you can set a non-existent clock 
and retrieve the non-changing date and time 
until you re- boot. 

The Clock Driver 

Since different ProDOS versions can have the 
c[(x;k driver cixie in different locations, it needs 
a way of knowing where the driver currently 
is. Remember the Global Page? Locations 
$BFB7 and $BF08 contain the current address 
of the clock driver. (Always remember that an 
address has the low-value byte first). When 
ProDOS first boots, it looks for a compatible 
clwk. If it finds one, it does two things. First, 



it places a $4C (JMP instruction) at locution 
$BF06. Then it modifies the driver so that the 
clock addresses within the driver point to the 
correct slot. If a conipatibic clock isn't found, 
it places a S60 (RTS instruction) at $BF06 
instead. 

When a program (or ProDOS itsell) calls the 
ML! (at $aF00) to retrieve the date, it uses a 
function code of $82. This tells it that it needs 
to execute the clock driver code. The MLI now 
does a JSR (Jumpto SubRoutine) toSBF06. If 
a clock isn't present, the RTS (RcTurn from 
Subroutine) instruction is executed and 
execution passes back to the MLI. If a clock 
is present, then the JMP (JuMP) instruction 
directs the proce.s.sor to the driver code. The 
driver code accesses the clock, fills in locations 
SBF90 through $BF93, and performs an RTS 
which passes execution back to the MLI. The 
ML! then returns to the program. 

Solving the Big Problem 

Those of you that have a CPS Clock realize 
that ProDOS doesn't recogni/e it. Even if it 
thouglit that the clock was compatible, the 
driver wouldn't work. That means that we must 
derive a way to fool ProDOS into thinking that 
we have a compatible clock and make it u.se a 
different driver. The problem wouldn't be too 
hard to solve if we were only going to use the 
clock for our own applications. In that case, ail 
we would need to do is BLOAD our own driver 
into a location that know we is safe and change 
locations JBF06 through SBF08 to be a JMP 
to our driver. Then, anytime ProDOS or our 
programs needed the time, it would use our 
driver to access our clock and everything would 
work just fine. 

But, we afso want our store-bought programs 
to use the clock. This is tricky for two reasons. 
First, we never know what parts of memory the 
application will use, perhaps all of it. Second, 
mo.st applications do not have a BASIC 
Interpreter and do not allow us to leave the 
application itself. 

There is a solution! After ProDOS boots, it 
checks the catalog for the first system program 
with a name ending with '".SYSTEM". By the 
way, a system program is one who.se file type 
is "SYS", It is always a binary file that will 
run at S2000. At the end of the boot, ProDOS 
loads this progratn and passes execution to it 
with the JMP command. On our ProDOS 
User's Disk, this program is called 
BASIC. SYSTEM, On an application program, 
it could be called anything. The solution is to 
rename the , SYSTEM program so that ProDOS 
won't find it and will fitid our own program, 
CLOCK. SYSTEM, instead, 

CLOCK, SYSTEM contains our homebrew 
clock driver and code to install it. The 
installation code first changes the RTS 
instruction at SBF06 to be a JMP instruction 
so that ProDOS knows that a clock exi.sts. Next, 
it changes all of the absolute addres.ses within 
the driver to be consistent with where we are 
going to move it, Then, it relocates the driver 
to the only safe place that we can move ii: over 
the area where the old driver was. 



The final thing that we will do is execute the 
system program that would normally be 
executed right after ProDOS booted: the one 
we renamed. This gets more complex, 
CLOCK. SYSTEM would have to relocate itself 
somewhere efse since the other system program 
also executes at S2000 and wc w'oukl overwrite 
ourselves if we loaded il. Also. BLOAD and 
BRUN aren't currently available for us to use. 
That would mean that we would have 10 write 
code to manually search the catalog and 
manually load it, AH of this could be done, but 
would require a lot of extra work. 

Luckily, there is an easier solution. ProDOS 
contains a section of code called QUIT which 
is accessed through the MLI. The QUIT code 
is designed to be used at the end of a system 
program to let the computer u.ser execute 
another system program. By letting ProDOS do 
the work, we can save ourselves a lot of trouble. 
There is one problem though. The QUIT code 
requires you to enter the name of the next 
system program that you want to execute. That 
means a few extra keystrokes evorytime you 
boot. Whenever I rename the .'SY.STEM 
program. I call it "GO". That cuts down on 
the number of keystrokes, ALso, by always 
using the same name. I do not have to remember 
what 1 called it on each disk, 

A Guided Tour 

The source code listing puts into practice 
everything that we have talked aliout. Most 
people place their CPS Cards into either .slot 
I or 2. This listing is assembled for slot 2. If 
your card is in slot I (or any other slot, for that 
matter) a few minor clianges are needed. If you 
arc using an assembler, simply change the 
"SLOT ,EQ 2" in the source code listing (next 
page) from a 2 to a 1 (or whatever the slot 
number is) and everything will assemble 
correctly. If you are going to type the program 
in through the monitor, change the SC2 to ,$C1 
(or C followed by the slot number) at the 
following hex locations: 205E. 2090. 20A4. 
20A7. 20BA. and 20BD. 

Since this is a system program, it must reside 
at address S2000. The driver code follows the 
installation code which is executed at boot time: 

There are several ways to access the clock 
through assembly language. I chose the most 
direct method, which bypasses the built-in 

ROM program on the card and aeces-ses the 
clock directly. The clock is accessed by writing 
commands to its address location and reading 
data from (or writing data to) its data location. 
These locations are SCxFE and SCxF9. 
respectively, where x is the slot number. 

Since time is always moving, we must hold 
the clock briefly while we read it. If we didn't 

and il was, say. 2:59. we may retrieve the 
minutes and the clock may then become 3:00 
just before we get the hours. We would then 
think that the time was 3:59, This hold function 
is performed at S205A and after completion, 
the dock is released at S2099. The resiof the 
program gets each part of the date that it needs 
and stores it at the previously mentioned 
locations. 



COMPUTIST No, 35 



m 



TKl- RDCLK .•.ubroutinc rctrit'vcs \\k ii;ns 
|)lucc orcuch flolU. mulliplios it by ten. then 
retrieves the ones place and adds it to the tens 
pitifC. Thi; imilliplicalion is dont; by sllilliiij; I wo 

pl:iees to the U?!'!. addiiiL; baek in ihij ori^inyl 
nuitibcr and shillint: Ih;; result unL'platir lo thi; 
lel't. Fur t:\iinipk'. d" wc arc working on the 
iiiinuie.s field uiid ii is ikiw 2:5^. wc will ret["iovc 
a 5 for the tcn\ plute. Shil'tin;; lo the left is ihc 
equivalent of niulltplyjng by two since we have 
a binary niaehine. The first shitt tLrn.s the 5 into 
u IS (SA). Thi; SLXuiid shiTl lunis a into a 20 
(S141. Addini; baek in the oritiinal numbi^r. 5. 
irives us 2? (Si 9) and ilif last shiti imns (his 
ko a 50 (S32). 

We then retrieve the ones position. whii:h is 
a 9. and add it to the 50 lo give lis 59 (S3B). 
Each value that wt- retrieve is returntxl (mm the 

C'lofk in the rightmosl nibble, except for the tens 
plaec of hours, where we only need the two 
LilBs. in that tuse we perform an AND 
instrurtion to mask out those bits. 

The inslallution code changes $BF06 lo be 
a JuMP inslruclion and then ealculates where 
RDCLK wdl reside after relocation, h [hen 
eh;mgO-s each of the JSRs to RDCLK in the 
driver so that they will point to its new location. 
The next step is to hank in the language card 
RAM and ^iverlay llie iil'w ckiek driver on lop 
of tlie old driver. Finally, the installation code 
culls QUIT through iht MH (al I204C). 

Instatiing Our Masterpiece 

Either type in the ■ntachirii? code through the 
monitor or type in the assembly code fthis is 
in S-C Assembler format) If you use an 
assembler under DOS ?.} simply convert the 
reiiultant binary file with the ProDOS 
CONVERT Uiili'iv. To make life simpler, call 
your program something other ihiin 
CLOCK. SYSTEM (such as, CPS. DRIVER) 
because it is not yet a .system program, 
(ProDOS won't let you BLOAD a system 
program so you would want to keep a binary 
version of u around for future use). Put your 
program onlo your PrtiDO-S Lser's Disk and 
place your target disk into drive 2, (You can 
iilso tin this with one drive) Rename the current 
.SYSTEM progratn and save your program as 
a .SYSTEM program. For e\ainple: 

1) Make a backup copy of the disk you intend 

to install the clock driver on. Put away the 
original, NEVER modify your original disk. 

2) Bool ProDOS and uiuci BASIC. 

3) Enler the monitor with CALL -151 and type 
in the hexdunip (if y.ou don'l assemble it). 

4) Save the program to disk. 

BSAVE (:PS.DRlVER,A$2flefl,L$C3 

5) Locale the .SYSTEM program and rename 
it -GO ■■ 

RENAME bask:.. SYSTEM, (H> 



Table 1: Time/Date Storage 



FIELD DECIMAL 


HEX 


? BITS 


BiNAfiV 


COMMENT 


Month 9 


9 


A 


1001 


s.ee be 1 ow 


Day 15 


F 


5 


01111 


see below 


Year 86 


55 


7 


1010110 


5ee below 


Hour ?3 


17 


8 


00310111 


Placed at $BF93 


Minute 45 


2D 


8 


mmm 


Plaead at $flF92 


<— -5BF91- 


— > < — 


-SBF90- 


~> ADJRESS 




7 6 5 4 3 2 


10 7 5 


5 4 3 2 


10 BIT # 




10 10 11 


10 


10 11 


11 BIT VALUE 


< — YFAR — 


-> <-mt^ 


-> <-DA> 


-> FIFLD NAME 



Source Code For CLOCK.SYSTEM 



* 




CLOCK 


SYSTEM -- USE 


THE MCS CLOCK WITH PRODOS 


* 




REMEMBER TO RENAME THE ORIGINAL .SYSTEM FILE 


* 






P BLUMSTEIN -- 1/86 






OR J2000 






003A- 


TFNS 


FO S3A 


KEEP A WORKSPACE LOC 


0010- 


READ 


EQ S10 


CLOCK READ COMMAND 


0002- 


SLOT 


EQ 2 






C2FE- 


clkai;r 


EQ £LOT*U00+SC0FE 




C2F9- 


CLKCATA 


.EQ SLOT^H00+.i.Cr9 




003A- 


TEMP 


.EQ $3A 






BF90- 


WLI 


..EQ $BF00 


MLI ENTRY POINT 




START 








2000. 


AS 4C 




LDA flS4C 


SETUP GLOBAL JUMP 


2002: 


8D 06 BF 




STA SBFSe 




2005. 


18 




CLC 




2006 


AO 07 BF 




LDA JBF07 


CALC ADDRESS OF RDCLK 


2009. 


69 46 




ADC SROCLK-CLKSTART 


200B; 


85 3A 




STA TEMP 




200D: 


AD 08 BF 




LDA SBF08 




2010. 


69 00 




ADC fl0 




2012 


80 63 20 




STA JSHl+2 


SET UP RELOC INFO 


2015: 


80 6E 20 




STA JSR2+! 




201B- 


80 77 20 




STA JSR3t2 




2016. 


80 7F 20 




STA JSR4*2 




201E: 


80 92 20 




STA JSR5+2 




2021 . 


A5 3A 




LDA TEMP' 




2023: 


8D 62 20 




STA JSRl+1 




2026; 


8D 6D 20 




STA JSR2+1 




2m: 


8D ?6 20 




STA JSR3+I 




202C. 


80 7E 20 




STA JSR4+1 




202F- 


80 91 20 




STA JSR5+1 




2032: 


AD 07 BF 




LDA IRFfl? 




2035; 


85 3A 




STA lEMP 




2037; 


AO 08 BF 




LDA JBF08 




203A; 


85 3B 




STA TEMP4 1 




203C; 


AO SB C0 




LDA IC08e 


ALLOW WRITE TO RAM 


203F: 


AO SB C0 




LOA $C08B 




2042: 


A0 69 




LOV SCLKEND-CLKSTART MBYTES TO MOVE-1 




LOOP 








.2044 : 


B9 59 .28 




LDA CLKSTART.Y OVERLAY CLOCK DRIVER 


2047: 


91 3A 




STA (TEMP},V 




2049: 


B8 




DEY 
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Z04A; 
204C: 
204F 
205ft: 

2052: 
2053; 

2054; 
2056 : 
2057; 



2059 
205A 

2B5C 
205F 
2061 
2064 
2067 
2059 
206C 
206 F 
2072 
2073 
2075 
2078 
2078 
2070 
2080 
2081 
2082 
2083 
2084 
20S7 
208A 
2fl8B 
208E 
2090 
2093 
2096 
2099 
209B 
2@9E 



209F 

20AI. 
20A2 
20A5 
20A8. 
20AA- 

20AC 
20AE 

2030 

2061 

2082 

20B4 

20B5. 

20B7: 



10 FB 

20 00 BF 
65 

52 20 

* * * END OF DR 
t4 PARMS 

m 

00 00 
00 

00 00 

* * * BEGlNNfNG 
CLKSTART 

B8 

A9 40 

8D FE C2 

A9 03 

20 9F 20 JSRl 

80 92 BF 

m m 

■2C 06 BF 

20 9F 20 JSR2 

SD 93 BF 



20BB, 
20BE: 
2flC0 
20C2 



BPL LOOP 
JSfi ULI 

hS 65 EXECUTE QUIT CODE 

DA PARMS 
IVER INSTALLATION CODE * =;= 



HS 04 
HS 00 
HS 0000 
.HS 00 
HS 0000 
OF DRIVER * ** 



INDICATE « PARMS 



JSR4 



JSR5 



AS 0C 

20 9F 20 JSR3 

8D 91 BF 

A9 0A 

20 9F 20 

4A 

GA 

6A 

6A 

80 90 BF 

AD 91 BF 

2A 

SD 91 BF 

A9 08 

20 9F 20 

0D 90 BF 

80 90 BF 

A9 W 

80 FE C2 

69 

- * * RDCLK- 

RDCLH 

m 10 

AA 

80 FE C2 

AD F9 C2 

50 K 

29 03 

NORM 

29 0F 

85 3A 

0A 

0A 

65 3A 

0A 

85 3A 

CA 

8F Ff C2 

AD F9 C2 

29 0F 

65 3A 

60 



GLV 
LOA 
STA 
LOA 
JSR 
STA 
LOA 
BIT 
JSR 
STA 
CLV 
IDA 
JSR 
STA 
LOA 
JSR 
LSR 
ROR 
ROR 
HOR 
STA 
LOA 
ROL 
STA 
LDA 
JSR 
ORA 
STA 
LDA 
STA 
RTS 
ENTRY 
ON EX I 



CLKADR 

ff3 

RDCLK 

SBr92 

Jf5 

SBF06 

ROCLK 

JBF93 

•i;i2 

RDCLK 

SBF91 

S10 

RDCLK 



SBF90 
tBF91 

SBF9! 

sa 

RDCLK 

tBF90 

IBF90 

^0 

CLKADR 



HOLD THE CLOCK 

MINUTE ADDRESS 

STORE Ml MUTES DiRECTLV 

HOURS ADDRESS 

SET V FLAG... 

. HOURS GET SPEC HANDLING 



YEAR ADDRESS 

STORE IT UNSHIFTED 
MONTH ADDRESS 

SHIFT INTO PLACE 



PUT WHATS LEFT WHERE 
GET THE YEAR BACK 
...& STICK IN THE MONTH'S 
...i PUT IT BACK 
ADDRESS OF DAY 

PUT THE MONTH IN & ... 

PUT IT BACK 
TAKE CLOCK OFF HOLD 



■A' CONTAINS A CLOCK FIELD ADDRESS 
T 'A' CONTAINS ITS- BINARY VALUE 



CLKEND 



ORA #READ 

TAX 

STA CLKADR 

LDA CLKDATA 

BVC NORM 

AND n 

AND *IF 

STA TENS 

ASL 

ASL 

ADC TENS 

ASL 

STA TENS 

DEX 

STX CLKADR 

LDA CLKDATA 

AND fiT 

ADC TENS 

RTS 



PUT READ FLAG INTO ADDRESS 
HOLD THE ADDRESS 
GET lENS PLACE 

SKIP THIS MASK EXCEPT 
.HOURS NEEDS 2 BITS 

OTHERWISE, I NIBBLE 

MULTIPLY BY TEN 



POINT TO ONES PLACE 

AND GET IT 

KEEP A NIBBLE 



6) Install the new clock driver as a .SYSTEM 
tile. The TSYS L-oriiTTiEincI ttll.s PtoDOS that tho 
nie type we're working with is ..SYS I 'Type 
SYStein"). Tlii;, will koc-p Pro DOS tt-om 
ctmiptaining. 

ni-OAD CP.S.DRIVER 

CREATE CLOCK. SYSTEM. TSYS,D2 

flSAvn(:i.orK.sYSTF,M,TSYs.AS2efle.uo 

The hexdiimp contains the program in hsiiiaiy 
with the checksums created by CITECKBIN. 
You can nin CHECKBIN under ProDOS by 
usinji the ProUOS CONVERT Utilitv to make 
it a ProDOS Hie. 

Alwav--^ perform the above on a backup disk 
only, never on ttie originiil When you boot iht 
riMxliried disk, u will prompt you: ENTER 
PREFIX Hii RETURN at Ihis'point. It will 
(hen prompt you Tor the program name. Type 
m GO (in upper or lower case) and hit 
RETURN. The program will then proceed as 
it always did before. If you mistype the proeram 
name, the QUIT cixle will say EILE/P.ATH 
NOT FOUND anj stop Don'l panic Simply 
hit Reset and it returns to the ENTER PREFIX 
prompt. 

Advanced Improvenieiits 

Two additional features can be added to this 
program. If you ticcd to make the instalUitiun 
code work with the clock in any slot, you can 
add eoile to 11 nd the slot thai your eloclt is 
Lui Tfiilly in, Vour CPS Setup Disk has a BASIC 
protiram called CPS, .SLOT FINDER that catt 
easily be eonvertt;d to tissemPly laiigttitge. To 
see this program, bool ths Setup disk, quit imo 
BASIC, type in NEW. then EXEC CPS SLOT 
FINDER and LIST, 

If yoti do not like to type GO every Imie you 
boot, you can add code to relocate the 
insiullutloii code, load the GO program at 
location %lim and .IMP to i I Personally, I rind 
both of these features more trouble than they 
are worth. 



CLOCK.SYSTEM Hexduinp 


Z000, 


A9 4C 80 06 BF IS AD 07 


5C6BE 


2068: 


BF 69 46 85 3A AD 08 BF 


IIBAF 


2010. 


63 00 8D 53 20 8D 5E 20 


S2409 


2018. 


8D 77 20 8D 7F 20 8D 92 


$2F9E 


2020. 


20 A5 3A 8D 62 20 8D 60 


SDE51 


2m 


20 8D 76 20 8D 7E 20 8D 


S0763 


2030: 


91 20 AD 07 BF 85 3A AD 


S92C5 


2038 


08 BF 85 3B AD SB C0 AO 


S6E88 


2040, 


SB C0 Ag 59 B9 59 20 91 


S35A6 


2048, 


3A 88 10 FS 20 00 BF 65 


SBF93 


J050- 


52 20 04 00 00 00 00 00 


S5437 


2058: 


0S B8 A9 40 SD FE C2 A3 


S50A6 


2050: 


03 20 9F 20 8D 92 BF A9 


S3A0F 


2058: 


05 2C 05 BF 20 9F 20 8D 


iF0B2 


2070. 


93 BF BS AS 0C 20 9F 20 


$3515 


2078. 


8D 91 BF A9 0A 20 9F 20 


SC14E 


2030 


4A 5A 6A 6A 80 90 BF AD 


I31C4 


2088 


91 BF 2A 8D 9! BF A9 08 


56760 


2090. 


20 9F 20 0D 90 BF 8D 90 


i55D2 


2098: 


BF A9 00 8D FE C3 60 09 


SD3DA 


20A0. 


10 AA 8D FF C2 AD F9 C2 


SBD89 


20A8: 


50 02 29 03 29 0F 85 3A 


S870C 


20E0 


0A @A 65 3A 0A 85 3A CA 


S7F5E 


2068 


SF FF C2 AD F9 C2 29 0F 


S75EB 


20C0: 


55 3A 50 


SF385 



COMPUnsT No. 35 



iw 



Putting a New F8 On 
Your Language Card 



by Ken Burnell 



Requiremtnls: 

Applf" Language Card 

Low wattiigf ,*ji)ldenng iron 

Small diameter solder 

Small diameter wire strap 

Apple )[ Plus or equivalent computer (not Ih 

or lie) 

2716 RPROM 

Exaclt) kniri." or etjuivalem 

Access to an RPROM burner 

Note: The following procedure invqlea 
modification of your niotherhoard and/or your 
Ijinguage Card. COMFUUSTwiU not bt hdd 

n-i/M>niil.i!f for i.my damagini incurred w'ltile 
following !his procedure. 

Evta^ since 1 read an article in ' 'Computers 
& Electronics"" on custom progriiirimitig Apple 
EPROMs (reference #1). and boughi an 
incxpcnstvc EPROM burner, I have been 
burning custom FR F-PROM\s for my Apple, 
and enjoymg it more. (I had previously built 
a ROM /EPROM adaptor socket for [he Apple 
motherboard (rotcrcnec tt 2)). Therefore, when 
r read Ray Darrah's article in C0MPUTI5T 
No. 19 (referi;nt;e # 3) I happily set out to round 
up a 37:12 EPROM and miscellaneous small 
parts and program up a new, improved, 
expanded super FR. But. after re- reading Ray's 
article completely llirough again, I realized thai 
I didn't really want to fool around with adding 
an extra chip lo uty virgin mothertsc^d, cutting 
traees, etc. 



So. I .shelved the project (with several others) 
until I could 11 nd a better way. The procedurt: 
I finally eame up with assumes that you have 
an Apple Lanouage Card. APPI.P* Product 
# AZBP)0f)6 or equivalent. The way to spot this 
card is that it has a short sixteen-wiro, cable 
extending from a UJP soclcet on t!ie card to a 
RAM socket mi the motherboards (Apple says 
to u.se the RAM socket at location E8 but 
replacing other RAM khips in other location.'; 
will also work). Mosr imponam of all. ihli card 
has an an F8 ROM chip (usually a 9316) 
mounted near the rear of that card. 

There are a few things you .should know 
about the Apple Language Card and its ROM 
chip. First, the ROM on the card effectively 
replaces the F8 ROM on the motherboard. In 
fact, with the [.anguage Card installed, you can 
remove the F8-R0M ahogclhcr on the 
motherboard (with the power mrned OFF, of 
coursel) and the computer wdl still work just 
fine. But the second , and more Important fact 
is that the Apple Language Card, like the Apple 
Integer Curd (remember those'?), has two sets 
of solder pads. "When these pads are modilied, 
the substitution of a programmable 2716 
EPROM for the standard 9316 uon 
programmable ROM supplied with the card is 
allowed. 

The Way 

The procedure, which references the sketch 
on page 2 1 , requires the use of an exacto knife 
or equivalent, a small (1/4 inch or so) piece of 

wire (28 to 30 gauge, solid copper if you have 
iij and a low temperature soldering iron. 
Note: lL\in}^ a stondrjrd ' 'snldfring gml ' ' type 
iron on any primed circuit hoard amid duimif^c 
the hoard. 



For printed circuit (PC) work. I use a fifteen 
to thirty watt iron, maximum, with ,small 
dianieter resin core solder. I have found that 
solder diameter size # 30 works fine foi the 
what we will be doing. 

The proeedurc for modifying the Language 
Card to accept EPROMS instead of ROMs is 
as follows; 

1) Using the knife, cut the copper circuit trace 
at the X shaped pad.^; marked '■2716'" a.s .lihown 
on the sketch at pomt A, Only a small, deep, 
cut is tieeded to sever the trace. If you have a 
continuity tester (or VOM meter), place it on 
a low resistance setting and use it to test for no 
continuity between the cut traces after 
perfonning the surgery. 

2) Place a short piece of small diameter copper 
wire across the O-.shaped pad.s marked "2716" 
at point B on the sketch. Solder the jumper 
across the pads, joining the pads, 

3) In.stall your EPROM hcing sure that the notch 
is pointed in die same direction (usually up) as 
the ROM you're replacing. 

4) Re-install the card and its jumper cable back 
onto the motherboard, and you're done. The 
next time you boot up your computer, it will 
boot from your new EPROM on the Language 
Card. 

Burning EPROMs 

At the end of this article. I've listed several 
references to various articles and published 
tetters previously written about burninji 
EPROM's for Apple |[ computers. One of the 
problems I had. initially, with this process was 
that the authors told how lo modify the 



20 



COMPUTIST No, 35 



EPROM's code, and how to write binary 
programs of ilieni. bui not how to get tlie binary 
cwle into the EPROM's! 

Fortunately, the BSAVE and BLOAD 
commands of DOS lielps to make this job easy. 
For example, to save [he contents of the FS 
ROM (•■uploading" in computer talk), you 
would type 

BSAVE STDF8,$AF8eB,L$8B« 

where "STDFa" is the file name ! chose. 
$F8O0 IS the beginning address in memory and 
S800 is the length of'the file ($F800 through 
SFFFF in the ROM). This would create a 
binary file of tJiecode in the F8 ROM (which. 
by [he way is printed in Apple's reference 
manual in an appendix (reference H Dj). 

Later, when you want to transfer the binary 
II le on disk to an EPROM in your EPROM 
burner, it is first necessary to select an addres.s 
in RAM for the file to go. ! usually use address 
!EI(!)00 for ease of making address calculations. 
Then, transfer the file from disk to the memory 
of the computer ("downloading"). The 
command to use here is BLOAD and it would 
look like this; 

BLOAD STDF8,SAieftO 

Now, you would typically transfer control to 
your EPROM burner and instruct it to burn an 
EPROM using the data starting at S1(W(1, 

EPROM's And Special Keyboards 

There are several keyboards around that are 
claimed to be exactly "plug compatible" with 
the .standard Apple keyboard - that is, you can 
unplug your Apple keyboard at its sixteen-pin 
plug (better note the orientation of that plug or 
bad things may happen) without using a special 
adaptor tx)ard. But, if the replacement keyboard 
has lower case capability, you probably won't 
see the lower ca.se characters on your monitor! 
This is because the Apple's F8 ROM converts 
the lowercase characters to uppercase befoie 
putting them on the screen. 

Well, we can't have that can we'.' in Mr. 
Mitchell's article (reference # I) he told how 
to fix this problem by modifying the code in 
a new FS ROM. and he also told how to do 
some other interesting things like having your 
name displayed on the computer's monitor 
when it boots up instead of Apple's, etc. 1 
strongly recomntend Mr. Mitchell's article lo 
anyone wishing to customize ROM's in his 
Apple |[. In COMPUTIST No. 9. (reference 
# 4) an the author told how to modify Pro DOS 
1 .0. 1 to run on Franklin Ace and other Apple 
clones. Recently, Beagle Brothers (reference ti 
.'^) gave a tip on how to modify ProDOS 1.1.1 
in much the same manner. 

Some software checks for a code at location 
.5;FD83 in the FS ROM. This code indicates that 
a particular computer (1| + . //e, Franklin, other) 
is being used and then bombs if it doesn't like 
the answer. Likewise, the software may 
checksum-check the whole ROM. One solution 
to this problem is to use Ray Darrah's 
2732-chip-wiih-a-switch trick (reference U 3) 
and switch between a standard F8 image and 
your custom one in either half of the 2732 - 



mounted on your motherboard. Integer Card, 
Language Card or... The variations are limited 
only by your imagination and pocket book. 

The Integer Card 

I mentioned earlier that the Apple Integer 
Card might also be modified to take 2716 
EPROM's. Well, it can, in much the same way 
as the Language Card - by changing the wiring 
on two sets *)f 0-shapod and .X -shaped pads as 
.ibove. Then the live ROM's - D0. D8. E0. E8. 
F0 and F8 can alt he replaced with 2716 
EPROM's, 

Now. suppo.se you want to progratn often- 
used utility software into memory locations 
$D(^M through $F7FF. ordinarily taken up by 
Applesoft in the ][ +. Do you suppose 1 could 
break up my favorite binary program into 2,948 
word (2K} blocks, store them on disk as binary 
files, download thetn to 2K 27)6 EPROM's in 
my EPROM burner, replace the D0-F0 
Applesoft EPROM's (that I previou.sly replaced 
the 93 16's with). Hip that magic red switch on 
the back of the Integer Card, and have, say the 
Copy \\ Plus utility programs up and running 
at the flip of a switch? I'm sure it can be done 
but I haven't tried it my .self. 

About EPROM Burners 

EPROM burners can be expensive, I've seen 
them from thirty live dollars (the card fits into 
a slot in the Apple) to thousands of dollars. And 
EPROM erasers ain't cheap, eitlier - they can 
run from about $ 30 to S 80 and up. But. 
EPROM's are erased by UV (ultraviolet) rays 
like those given off by the sun and many 
fluorescent tubes. So, they say it's possible to 
tape an EPROM to a fluorescent lube or .set it 
out in the sun for a week or so, and it should 
erase. Or. you may want to get together with 
a few friends antl share the cost of an 
inexpensive burner, and, maybe an eraser. 

The price of 27 1 6 chips is down to a few 
dollars each. You don't tieed the '"fast" 250 



ms jobs. The slower, less expensive ones at 450 
ms or so will work just fine. A good source of 
all this hardware is advertisements in the back 
of Byte, Computers & Electronics or 
COMPUTIST magazines. 

Have flin burning. 
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The Senior PROM 
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So you want to take control of your Apple 
//e or //c? You've decided you need' a way So 
reset direcily inio die Monitor, m NMI & copy 
curd, it setlot editot . and some machine 
language utilitcs, but you only have 80 bucks 
(o s[)eiiU? A new, low-coii device consisting of 
32K of ROM and a pair of switches attached 
by a libbon cable, going by the name of the 
Senior PROM, may be just what you've been 
looking lot. 

Description 

The Senior PROM (.SP) is n primed circuit 
(PC) card about Lwo inches scjuact;, that replaces. 
ihe 8K (2764) CD and EF ROMs on the 
motherboard with a pair of i6K (27128) 
EPROMs, These contain an image of the 
original Apple ROMs in one lialf and the SP 
firmware in the other half. At the end of the 
two fcHJt long ribboti cable Is a second PC card 
(2" by 1") with a pushbutton switch for 
performing Non-Maskable Inlemipts (NMT^) 
and a ihree-po.sitinn toggle switch to select and 
deselect SP. A small micro-probe with jusL 
enough wire to reach from die SP card to pin 
6 of the 6502 provide,'; the hookup lor the NMI, 
A companion di.^k < described below) is 
included. 

Installation 

Installation is slightly more complex than just 
plugging in a card. You must rctnove ihe CD 
iand F,F ROMs, observitig the usual precautions, 
insert the Senior PROM into ihc empty sockets. 



and aiiach the NM! wire to the processor. 
Although 1 have noi iried die SP on a //c, I'm 
sure thai installation in the lie will be a bit 
trickier, as the case "snaps" together. 

Documentation 

The documentation included with the SP is 
comprised of three stacks of stapled-togcther 
pages, all of which have clear, easy to read 
print. The thickest stack (54 pages) contains 
installation instruclions fur both Ihe lie and Uc 
and gives a thorough description of all the SP's 
I'ealuies. jiv many cases, Ihc instnictions explain 
why a feature is provided and possible uses for 
il are given. 

The smallest stack contains a keyboard 
overlay (on ordinary paper in two black and 
white halves that must be cut out and taped 
together) for quick reference to the options that 
become available directly after pressing Reset, 
This stack also contains diagrams for opening 
your computer and installing the SP, 

The third stack is entitled "Dcproteciion 
Methods and Techniques Using ihe Senior 
PROM."" This one gives an introduction to copy 
protection and indicates things to look for when 
identifying a protection scheme, with some 
ways to get around them. This is a very general 
manual (not much detail doe.s ."iJl pages make):, 
but it should provide a good starting ptjim for 
the novice, assuming he know.s assembly 
language. 

The Switches 

The SP Hrmware is inactive when the toggle 
switch is toward the rear of the computer. In 
this mode your Apple works like normal. 
ROMS and all. When you switch it lo the 
forward (activiiied.) position, Applesoft BASIC 
di,sappears (this could cause bad things lo 
happen if you happen lo be running an 
Applesoft program) and the only means of 
talking lo your computer is through the SP's 
enhanced monitor. Once here, you have .several 
utilities at your disposal including a sector 



editor, RWTS menu (with a disk copier) and 
Memory Management, 

However, the real power is nv^iilable -when 
you press Reset or the NMI button. If the SP 
4^ in the "activated" or "transparent" (middle) 
position, the coinputcr stops everything, 
responds with a distinctive beep, and sits in the 
"Wail Mode," Al this yxfinl there are a number 
of option.', available. You can drop directly into 
the Monitor, reboot without destroying 
memory, or go directly to the hnilt-in RWTS 
utilities. You can copy all of ihe main RAM 
to the auxiliary RAM (assuming of course you 
have al lea,sl I2BK RAM) for saving; sviap inuiu 
and auxiliart': sec where the program was when 
you interrupted il (if you u.sed NMD: restart ii 
program from the last time you interrupted and 
saved it; dump the text screen lo the printer; 
and a few other things. All these options appear 
on the keyboard overlay so you eari quickly 
choose the one you want, [f however, you 
refuse to tape the keyboard overlay to your 
computer, you will be forced to memorise 
several arbitrarily assigned keys, 

Tlie Menus 

The RWTS Utilitie.s, also called the Main 
Menti. appears on the screen alter pressing the 
'"8" key from the wait mode. From here you 
can format a blank disk without DOS, copy a 
disk, alter the prologs and/or ignore the epilogs 
when reading a disk, or ignore most other 
RWTS errors (via the handy -dandy 
B942;18), The sector editor and disk copier can 
use either the RWTS kept in ROM or use an 
RWTS captured from a program you wish to 
c;iamine or deprotect. From the Main Meiiu, 
one can al.so enter the sector ediior or go to the 
Memory Munagement Menu, 

The built-in sector editnr is not the greatest 
ever, but ii has many features. The standard 
features like switching between ASCII and hex 
display, reading incrementing sectors, editing 
bytes, and disassembling the sector are there 
as well as multiple sector buffering, disk and 
memory searching, reading sequential sectors 
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inlo sequential memory, and nibble viewing of 
a irack. In uddition to all ihal. viewing tlic 
catalog. Tree sector map. di.sk comparison and 
reading half tracks arc also supported. 

The Memory Management Menu is a repeat 
of some of tiic memory move features available 
through the Wait Mode with the addition of 
copying sections ofau.'iiliary RAM to useable 
main RAM for examination. Another option 
writes u test pattern into main memory for 
bracking what memory a program Utkes up. This 
^nienu could have been easiiy incorporated into 
the Wait Mode, but wasn't for some reason. 

A New Monitor 

The modified monitor will be a welcome 
addition for those who have 65C02s and want 
to use the extra opcodes available. The 
disassembler and the miniassembler arc both 
fully 65CB2 compatible (a (ii net ion not available 
even in the enhanced //'e ROMs). The Step and 
Trace commandii ha\'e been resurreetetl from 
the grave Apple put them into and may come 
in handy. 

The hexdump and disassembler have an 
ASCn display along the i ight side of the screen, 
useful for searching for text strings. This part 
has a harmless bug in which the ASCII is only 
printed at the bottom of the screen. It scrolls 
up normally, but if you start disassembly at the 
top of the screc-ii the ASCII does not get printed 
on the same line until the display does stai1 
scrolling. I hope this will be corrected in laier 
versions. 

The Fun Part 

One of the features that the SP's 
advertisement is tfT^iiig to push is the ability "'to 
lialt a program and instantly swap between two 
different 64K programs." It usually can. The 
catch IS, you have to he able to break the 
program with an NMI so that it knows where 
to restart the program, or else know the entry 
point. I wanted to t[;y this with my word 
processor and Dino Eggs (a da.ssic!), for 
example. Dino Eggs works just fine and I could 
restart it any time 1 wanted. I could do most 
of the tricks like freezing the game before a 
level and retrying that level until I fini.shed it, 
and even playing two games at once. However, 
things got tricky when prog rains took up 64K. 
or just played with the ■language card", I was 
unable to restart Flight Simulator II at all and 
Magic Window //e was extremely balky, but 
it can be done with most 48K programs. Some 
programs are simply hopeless, but this is due 
more to the //c's hardware than to a fault in the 
Senior PROM. 

The Disk 

The disk contains utilities to save the contents 
of memory on disk in either 48K, e4K or 128K 
versions, depending on the progrum 
requirements. This allows you to restart the 
program cold From a DOS 3.3 environment. 
Also included [free unless you use them) arc 
Diversi-DOS and Diver.si-Copy from DSR. If 
you Ho decide to use them, DSR requests that 
you pay for them. You can also find CQPYB. 



a COPYA modification that reads and copies 
protected di.sks with their own RWTS (like 
Super lOB's swap controller). 

Gripes 

Four out of five hackers surveyed prefer a 
cursor-based sector editor .so they kiiaw exactly 
which byte they are dealing widi. In the SP's 
sector editor, you must specify the byte number 
from a prompt at the top of the screen, then tyj;)e 
in the bytes with only an address to tell you 
where you arc. I prefer a visual indication of 
what I'm doing in cases liki? this. 

The sector editor's search function is not like 
I expected. First you have to specify ilic string 
you want to find, then it always (whether you 
wanted it to or not) searches memory for all 
occu ranees of the string or sequence. Oh. you 
wanted to tmd it on disk? After wading through 
the memory search, press "L" for Locate 
Now, tell the sector editor to search through 
the sectors and it will beep for each one it finds 
and stop. The catch is, it doesn't tell you \\.iu're 
in the sector it found the string. Thi.s forces yoit 
to visually .scan 2.'i6 not-so-readahle, jam 
packed together byte.") for the search string. 

It would have been nice to have a sereen-to- 
prinler function available for all the features in 
the sector editor, like the disassembly or the 
memory searcher. But Noooo! If you want a 
screen dump, you have to hit the NMI button 
and print the screen from the wait mode. You 
CAN dump the .sector displ ay by pressing 
[QSL wh ich (o ddly) is QFJ in the wait mode. 
Pressing EEJ in th^ sector editor changes the 
disk drive sloi (P for Peripheral? Give nic a 
break). 

The documentation mentions a ProDO.S 
mode for the sector editor while talking about 
changing buffer pages, but no mention is made 
of how to activate it, if it even exists. 

Methods of movement between features are 
inconsistent. To get into the Monitor, you pre.ss 
Escape from the sector editor or menus and 
Delete from ihe wait mode. In the wail mode. 



ESCapc selects the mixed or full .screen 
graphics. To get to the sector editor, you press 
"8" from the wail motk, "}" from the RWTS 
menu. Things like that made learning to use the 
Senior Prom a bit tougher. 

The Senior Prom circuit hoard is taller than 
a normal eiiip in a socket, Its ROMs plug into 
sockets on the hoard which in turn plugs into 
the empty ROM sockets on the motherboard. 
This height difference will cause problems if 
you have long peripheral cards plugged into 
slots 6 or 7 of the //e. The Disk ][ controller 
card will be OK, but a card more than a couple 
ot inches longer than that will run into trouble. 
I was concerned that the micro-probe attached 
to the 6502 would he loo high for slot 4 or 5, 
but leposilioning the probe leaves plenty of 
room for card.s, 

A Bargain? 

Since this is still a fairly new pnxluct, It nCcds 
a little cleaning up. especially in the sector 
editor. Howcvct, having a sector editor and 
copy program ready to use at any time (DOS 
or no DOS) can help you ovt;rlook many of its 
limitations. It will take a couple hours of 
exploration and ret'erring to the manual to get 
comrortablc with it, and it will not make much 
sense if you haven't used machine language 
before. In fact, the "Deprotection Methods" 
manual emphasizes (hat you should read and 
study the "Apple // Reference Manual IJ/e)" 
and "Bcne.ith Apple DOS", and learn 
assembly language and the Monitor. 

If you add up the prices you would pay for 
each of the features separately, they could add 
up to over 150 dollars easily. On top of thai. 
till the tools arc in one neat little package that 
no program can detect. I intend to u.se it in my 
//e here at COMPUTiST for quite some time. 
It may not be pretty, but it can be a valuable 
and educational tool for the serious user of 
Apple //e's and //c's. 

— & 
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Reqtiiremenbi: 

2 blank disk sides 

The ln.s|Kcior or simitar sector editor 

SlipLT lOB 

Masqucnidt: is a fini; graphic itdvt;nturt; with 
excellent gniphits throughout. Unforttmatcly, 
it also comes with a fine proteciion scheme :is 
well, Attempts at copying the disk will produce 
only murginully booting copies at best. This 
article deals with the protection scheme used 
and lays the foundation for deprotecliiig other 
programs tising the same protection. 

The Protection 

Let's begin with u deseiiption of the 
protection scheme itself. To the best of our 
knowledge, il was created by Dav Hulle. the 
man from Phoenix Software and Zoom Graphic 
fame. He is a acquainted with of Mark 
Pe 1 czars ki of Penguin Software, which may 
explain the reason why Penguin's protect Ion is 
.SO .similar. Basically it has to do with disk 
formiitting. The address markers for the tracks 
alternate every other track, even tracks being 
D5 \.\ 96. odd tracks D4 A A 96. The data 
markers are left alone. The epilogue bytes are 
usually changed to DA AA or EB AA. although 
any legal value may be used for the first 
epilogue. This is one spot where the protections 
differ from prngratn to program. The two rnajor 
differences between Penguin's use of ihe 
scheme and others is the loader used and Ihe 
disk volume nuitiber (which is lied in with the 
loader). Penguin uses a normal DOS with a 
common disk volume number, where as the 
others u.sc Dav Holle's loader and all have a 
disk volume number of zero. This disk volume 
number is very important, but more on that 
later. Ttie methods for deprotecting tlie Penguin 
version have been fairly well described, but the 



original version of this protection scheme needs 
a little more discussion. 

An Overview of the Approach 

The first objective in deprotection is to 
convert the program into a format that can be 
read W'ith any normal copy program, such as 
COPYA from the Apple DOS i.i System 
Ma.ster disk. Then, the .second .step is to modify 
the program to operate under these conditions 
as well as to remove any further protection 
schemes from the program, such as nibble 
counts, ei cetera. The one advantage in having 
to undo this protection is that it does not 
incorporate any further protection past the 
abnormal disk format. So this is where we 
begin. 

Two different programs provide a way of 
convening to a normal tbrrnat. the first of which 
is Super lOB. The controller at the end of this 
article has a few things worth noting. The last 
ttack (variable LT) specified in line 1010 does 
not neccessariiy need to be 35, Some disks using 
this protection only use part of the disk. 
Masquerade being one of them. Its boot side 
only uses tracks through 17 So, if you use 
this controller for a different program, set L'l' 
to one more than the last track actually used. 
The other note is in line 1110, The argument 
of the two pokes (POKE 47505, x : POKE 
474 1 3, x) is the epilogue byte mentioned before. 
For this pailicular controller, a value of 235 is 
used, but it could be different for another 
program A way to find the correct value will 
be shown later. 

Just install this controller in Super lOB and 
run it on the disk. Super JOB also provides an 
easy way to correct for a disk volume number 
of ^eio. When prouipted, format your data disk 
with just such a number. For Ma.squerade, our 
job is a bit easier. a,s the actual playing side is 
in a normal fonnat to begin with. So just 
coiivcit side one. Other programs may use 
different configurations. 

Making It Work 

OK, that was the easy part. Now for the 
reaJIy fun stuff. We have changed the program's 
operating environment, so we need to modify 
the program to run in its new one. This requires 



the mixlification of four sector.^ of code on track 
zero. In order to do this efficiently, one must 
be able to read the .specific sectors into the 
correct memory pages used. This is so wc can 
see the code in its actual running environment. 
At the very minimum, you must at least be able 
to write out memory pages onto specific sectors, 
but if you can do ihis. you can read them in 
as well. The purpose of this is to avoid a boot 
trace, where the end result is the same. The 
program best suited for this purpose is the 
Inspector, and it is assumed here that this is 
what is being u.sed. 

The code under consideration resides all on 
track zeio, the boot track. The best way to 
modify it is to just read the seciors used into 
their eventual meniory locations. The following 
table shows what these should be: 

(Track $00) 
Sector should be read into 



m 


S800 


0E 


S900 


m 


SA00 


0C 


SB00 



Once the code is in place, wc want to enter the 
monitor and modify it. A few things should he 
noted also. 

Description of the Loader 

$891-828: This loads in the rest of the boot 

code. 

$887-92D: Sets up some ?cro page locations, 

clears the hi-res graphics screen, moves ROM 

into a RAM card (if present), and modifies the 

RESET vector, 

$939-95 F: This decodes the reset program and 

Stores tt down on the stack page. Then it 

decodes the rest of the boot code at $962-BFF, 

and stores it down on the text page. Jumps to 

continue the boot at S95F (J MP S792). 

Well, all this code seems harmless. We are 
intersied in where it reads in from the disk 
again, so we can change it to read a normal 
format. This is the code that is encrypted 
Starting at S962, So we must decode il to look 
at it. To do so, while the boot data is in 
memory, make the following changes: 
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952 :6» 

(to ?;top rhe decfiding routine) 

(10 store the code in the same spot) 

Tlicii we rail the decode part of llie boot bj 
tj'piiig: 

Now the code should tie in its final format. 
Before we forget, we must return the part of 
the program we just ran back to its original 
form, so Type: 

952:A5 

945:09 

Onee this is done, we can start to examine 
the rest of the boot ctxle. Before, we saw a jump 
instruction to $792, so we begin our trace at 
SB92, smcc we did not allow the program to 
relocate rhe code. At this poini in the discussion 
it should K" mentioned that tracing this type of 
code is very difficult and tedious, since the 
program manipultttcs the stack's return 
;u'ldresses for much of its operation. You will 
note thai the code docs not flow smoothly from 
$D92 on up. Thi.s fs because the returns from 
the JSRs do not come immediately back, but 
arc moved ahead slightly If you look at $BF4, 
you will sec a JMP $FC5S, which is the 
monitor's HOME routine. There is an RTS at 
the end \.}l liie routine, but just where will it 
return to'.' Well, by the time the code is this far, 
there are two extra values left over on the stack 
that have been forced on previously. The values 
poiul to the actual begmning of the program. 
If you look at SA.1F and $A40, you will find 
an FF 07. Thii is one less than the actual 
program start, so the program really .starts at 
$800. All the loaders are exaclly like this one, 
except the code is perhap.s longer or shorter by 
a few bytes. They are relatively the same 
though. So if you are examining a similar loader 
from a different program, bear in mind that the 
addresses used here are for the Masquerade 
loadei ouly The address you need should be 
very close, though. Just look for the same code 
in some relative position arid see by how much 
they are shifted. Then ju.st keep that difference 
in mind. OK. so in and amongst all this jumpi tig 



aboiit, there tnust be some disk routines. Well, 
yes. it turns out that ihey start at the very 
beginning. If you list $962 and up. you will 
notice the familiar drive addressings and such. 
So what needs changing? 

The RWTS Modifications 

!f9A9: Change from EB to DE I with 9A9-.DE). 
This is the epilogue byte that wa.s modified. 
%\W. Cliauge from EB to DE (same as above). 
$B6E; Change from 29 to 09. This is pan of 
a routine that lakes the current track number 
and checks it with the current address header. 
Since we will no longer have a D4 as part of 
the address header, we musi modify the routine 
to produce acceptable values. Basically, we 
changed an AND to an ORA, so we will not 
get zero values 

Now that we have the rest of the boot 
decoded and the RWTS fixed , there is but one 
more change to make. When die code was being 
decoded by the program, it EORed with the 
current value of the accumulator before storing. 
We do not want this, as it will destroy our own 
decoding job. So at S94W we change the 
instruction to LDA by making ii a BD 
(940: BD).. 

To finish, just write back the modified sectors 
to disk according to the sector/buffer table given 
previously. If you used the Supei fOB to 
convert the disk, you should have already 
formatted the data disk with a volume number 
of zero. If you forgot to do so, you will want 
to use the INIT progiam from Bag of Tricks 
to re-format the di.sk, preser\'ing data of course. 

This completes the deproteciion of 
Masquerade and any other program using Dav 
Holle's protection methods. Other programs 
that we arc aware of using this scheme are: 

Sherviootl Forest 

How Aljoiit a Nice Came of Chess? 

Cliess 7.e 

and Queen of Phobos 

We have succesfully deprotected all but 
Chc.'is 7,0 (which wc do not have) using this 
method wiih only minor changes. The changes 
involvf; only the diffences in epilogue bytes and 
code addresses mentioned earlier. To determine 
what the epilogue bytes are for your program. 



you may either boot trace the disk until the 
RWTS is decoded, or you niay read in the 
sectors off track zero, following the procedure 
and table above. You may have to turn off the 
checksum at SB942 (B942: 18) in order to read 
these sectors. Or yet. maybe one of I he nibble 
analyzers with a bit copy program can give you 
an indication of what they arc. Just remember 
to change the Super IDE controller accordingly. 
We have found that the deprotected versions 
boot fasier and more reliably ihan ihe originals 
do. So. besides having a hack up of your 
precious original, you have another reason to 
take off [he nasty protection schemel 
Good kick, and happy (.Tacking! 

controller 

1000 REM DAV HOLLE CONTROLLER 

iei0TK = :ST = :LT = 36 :CD = WR 

1020 n = IK : GUSUB4W . UOS'JBlllS 

1030 GOSUfi 430 : GOSUB 100 :ST-ST + 1 . IFST< 

DOS THEN 1030 
1GI40 IF BF THEN 1060 

1050 ST = :TK = TK+ 1 . Gt)SUB1110 : IF'TKcLT 

THEN 1030 
1050 GOSUB 230 : GOSUB 490 :TK = T1 ;S1 =0 
Wm GOSUB 430 : GOSUB 100 :ST = ST + 1 : I F ST< 

DOS THEN 1070 
1380ST = 0:TK = TK+1 ■ I F BF - AND TK < LT THEfJ 

1070 
1090 IFTK<LTTHEN 1020 
1100 HOME PRINT . PRIMT "DONE'' WITH'' COPY" ; 

END 
1110 POKE 47505 .235 . POKE 47413 ,235 : IFTK,' 

2<> INT {TK/2) THEN POKE 47445 ,212 
1115IFTK/2=INT(TK7 2)THENPOKF47445,213 
i 120 RETURN 

controller checksums 



1000 - $356B 

1010 - $3266 

1020- - SA7C4 

1030 - SB1C5 

1040 - S35FA 

1050 - S7575 

1050 - mil 



1070 - SA827 

1080 - S8EE6 

1090 - S0D80 

1100 - S7496 

1110 - $C000 

1115 - IFCDA 

1120 - $6914 
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Sword of Kcdosh 



bv John Deila Pia 



Penguin Software 
830 Fvurtb Ave- 
P.O. Box 311 
Geneva, (L 60IS4 



Rcqiiiremcnts: 

A dcprotcctcti backup of Sword of Kadash 

(sec COMPUTIST No 27) 
A iiecmr editor 

Sword of Kadash came in such a colorful 
f)itcku|;e i jusl couldn't wail to toot it up and 
Stan playing. Bui after a few sessions 1 i-c named 
it Bored of Kadash ;tnd stuffed it hack on the 
shelf. The original protected copy of Sword ot 
Kadash, at least the Apple version, is very hard 
to enjoy playinj?. Each time your la.st player is 
killed the entire playing di.sk must be recopied 
using the slow copy program thai comes with 
the game. This becomes tedious very quickly, 
After receiving COMPUTIST No, 27 with 
Michael R. Ditz's softkey for SwoitI of Kadash 
and using It to deproteei my disk. I decided this 
game might be worth playing if ! could give 
my character a fighting chance. So. armed wtth 
Copy II Plus' sector editor and the Crucial Code 
Finder by Enrique Gamcz (a memory search 
utility from COMPUTIST No, 6), 1 spent the 
next few evenings digging through code. With 
the resulting APT you will be ;ib!e to customize 
Sword of Kadash as you wish. You ciiu save 
the game position before trying anything 
dangerous, add as many lives as you like, or 
build a much stronger ehaiacter to aid yon in 
your quest. For those who arc in a hurry to start 



playing 1 have added instructions at tlie end. Just 
follow the steps there and refer to the character 
attribute table to build your super Kadash 
character. Fortho.sc who want to follow along 
I'll explain the reasoning behind the APT, 

The back of the Kadash disk contains all of 
the room (t.^ta as well as the character attributes. 
The data table for the character attributes is 
located on track S22. Sector SF. bytes STO-SIA. 
Table two is a listing of these bytes and what 
each one equates to in the game. When you use 
a new player disk for the first lime these 
attribute.^ are read into the game from the player 
disk, ff you save the game by pressing [CDQI 
the character attributes you have developed 
during play are saved back to the player di^k 
to the same track and sector where the original 
default values were stored. The condition of the 
last screen being played is also saved at this time 
to the track and sector on Ihe disk originally 
occupied by that screen. When restoring an old 
game, the program reads in the saved altiibutes 
and then goes to the last-used screen to resume 
play. Resloiing with one player disk and then 
replacing it with a fresh disk will give you a 
fresh set of screens complete with treasures to 
find, trap.s to avoid and monsters to slay while 
leaving you with the character attributes 
developed on the fiTxi disk. Thai"s not much of 
a bonus unless your character is strong enough 
to h.indlc the job. 

The easist change you can make to Sword 
of Kadash is to the number of lives you get 
before the dreaded skull and crossbones appears 
on ihe screen telling you it's lime lo copy yel 
another disk . By changing byte .S 1 A in the data 
table from 502 to any other number you can 
add that number of lives to your character. 
However, changing any of the othei bytes leads 
to trouble. When you stan to play and place 
your newly modified player disk in after bein| 



prompted to do so all you will get is an "Illegal 
Character Disk" message, ihis is because 
Kadash loads in the data table and then checks 
to see if these bytes have been changed before 
it reads in the screen data and starts the game 
[f you have changed any bytes the program 
won't run. 

The subroutine that does this check is found 
in the program "HIMRM" and loads into the 
computer memory at S5E0O. Table one is a 
listing of this code along with some remarks 
on what it is doing. As you can see from the 
listing, the tabic on track S22. .sector $F of the 
dala disk (Side B of the original Kadash di.sk) 
is first loaded into memory at S44R0. Then the 
byte at $4416 is tested. If this byte is ieru the 
program jimips to $4FCfl and the "H legal 
Character Disk" message appears. If the byte 
is not zero the code branches around the Jump 
and loads both the A and X registers with $00. 
Following this, the memory locations from 
$4400 to S4415 are Exclusive-ORed against the 
A register. The result of this i,s compared with 
the number at memory location $4419. If the 
sums match the program goes on. If they don't 
match the program jumps to S4FC0 and we get 
the "Illegal Character Disk" message. To 
remove the checksum and allow any attribtites 
you like to be given to your Kadash character 
all that is necessary is the removal of the two 
JuMP.!; to memory location SAFOH. You can do 
(his by searching and editing the disk or by 
BLOADing the program IIIMEM. modifying 
it and BSAVEing back to the disk. Once this 
is done you are free to modify your character 
as you wish. 

A side note: I had a great deal of trouble 
using the softkey for Kadash on my copy, After 
repeated failures I retraced Mr. Ditz's softkey 
and broke the controller back down into two 
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Table 1 

Code in pfogram HIMEM thai reads 
character attributes and does a checksum on 

them. 

Track Munrber to read. 
Sector Number to read 
Load Address = 14401? 



Read tbe data disk 
and come back 
Get the byte now at 
memory locat ion S4416 
If tyte is zero then 
periorm next comnand 
If nol zero branch 
to "i i legal disk" 
subroutine. 



5E00- 


LDX *fS32 


5Ee2- 


STX $030E 


5E05- 


LDX i!S0F 


5E@7- 


STX S030F 


5E0A- 


Lox nu 


5E0C- 


STX $0313 


5EDF- 


LOX mi 


5E11- 


STX S0316 


5E14- 


JSR S0300 


5E17- 


LDA S4416 


5E1A- 


BNE $5EiF 


5EIC- 


JMP t4FCfl 


5EIF- 


LDA #iD0 


5E21- 


LDX nm 


5E23- 


EOR S4400 


5E25- 


m 


5E27- 


CPX #116 


5E29- 


BCC }5£23 


5E2B- 


CMP S4419 


5E2e- 


BEQ J5E33 



5E30- JMP S4FC0 



X Pefforft cftei:)(sum fh 
locations $4400-$4415 

Loop back S16 times 

Compare the result 
with the byte at 
memory location S4419 
I f they match, skip 
the JMP to "illegal" 
routine and c!;(rtt ( n.ue 
program, 

Else goto "illegal 
disk" subroutine 



parts. I also removed the data statements and 
dill the DOS editing using a sector editor. That 
did the job. 

Here's How 

To parch the deprotected Sword of Kadash 
to nlknv chmiges to the player disk: 




Load in the binary tile "HIMEM" from sidt: 
A and replace the JMP S4FC0S (4C C0 4F) with 
NOPs (EA EA EA). 

BLOAD HIMEM 

CALL-151 

5E1C:KA EA EA 

SE3e;EA EA EA 

BSAVE HlMEM.A$4fl»e,L$54ee 

To modifi' the chamcrer uunbutcs: 

Sector edit track S22, sector SF. bytes 
S00-$1A as .shown in table two. 

To change your level, spells, hiipoints, 
maximum hitpoims or experience use only 
decimal digits 0-99 (Dotri use digiis SA-SF). 
Majtimum hitpoims. current hitpoints and 
experience arc stored in reverse. Thai is, 00 2fl 
is actually 20W when you start playing. 

Don't be loa greedy, [f, for example, you 
give yourself 99 spells and then grab one more 
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CHEST 














hIEM. CLASS = 


06 










51 


i^an^Ara^su; 


WE(iPOH = 


SIOOE: 


D 














LEVEL 


= 01 


ffEMOUE = 


StilELD 














SPELLS 


= 06 



when playing the game the counter will Hip to 
HH and you won't have any spells ai all! 

To saw your position before atieinptin^ 
someth ing dang etvus : 

1) Pre.ss [QOi to .save the game pusiiion, 

2) Press the spacebar and "B" to cominuc. 

3} If you wish 10 return to the point in the game 
where you pressed 

ICiQi . remove the player disk and insert u blank 
formatted disk. 

4) Press OO - 

5) Remove the blank disk and in.sen vour plavcr 
disk. 

61 Press the spacebar and "B'. 

Table 2 

Character .Attributes lor Sword ol' Kadash . 

Track 122. Sector $F, Bytes $00-ilA 

Byte Used for 



}00 

m 
m 

$05 
S07 
S08 
S09 
S0A 
S0C. 
S0E 
i0F 
$10 
S12 
$13 
$14 
$15 
$15 
$17 
$18 
$19 
ilA 



-$03 Screen no. ano character position 

Weapon S0e-S0A 

Armour S0C-S12 

Saves weapon value when curseS 

Saves armour value when Cursed 

Level 01-99 decimal 

Cursed = 01 Uncursed = 00 
-S0B Maximum Hitpoints (low byte first) 
-S0D Actual Hitpoints (low byte first) 

Armour class 

(Armour class backup?) 
■$11 Experience (low byte first)., 



Spei Is (Use 00-99 decimal) 

= H legal disk, 1 = good disk 



ChecKsum of attributes 
Number of lives {Usi decimal) 



i 
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softlcey for... 



1 .:.|.!r 



The Hobbit 



by J. J. Gifford 



Atkiiwn 


Wvsk- 


y Ptibti.'ilii 


ifi 


Co. 


■ he. 


Jaa/h.s 


Vm 










Readiiij' 


MA 


01867 









Copv proj;ra!!i (COPY A is fine) 
Sccior Editor (such u,s DiskEdit) 
«;, Super lOB 1.5 

Addison Wesley ha;, taken J.R,T?. Tolkien's 
clasisjf The Hobbii and used it as the basis for 
u mediocre graphics adventure game. Lil^e 
nearly' every other game produced today, it is 
copy protected. I tried M copy the di.sk u.sing 
a few bit copiers and met with litUe success. 

In nrder to study fhc hoot code. I booted my 
copy (that would not boot completely). I noticed 
that it huny oiilv after the hi-res title page. I 
u.sed my Wildcard 2 to enter the monitor and 
poke around a bit. 

The firsil pajje of code I eAamiiied was page 
$R. The cvxie looked like a standard boot, except 
I'or one thing: it moved code t'roni pages SB6 
and $B7 to pages $2 and $3 respectively, Then 
it jumped U> $2013. The code for these steps 
.starts at SB39 and looks like this: 



9339- 


A2 00 


LDX 


SS00 


0a3B- 


BD 00 B5 


LDA 


JB500.X 


083E- 


9D 00 02 


STA 


S0200,X 


0841- 


BO 00 B7 


LDA 


SB700,X 


0S44- 


90 00 03 


STA 


S0300,X 


0S4/~ 


E8 


INX 




0848- 


00 Fl 


ONE 


i083B 



084A- 4C 00 02 JMP $0200 

As yuu can see. it is not hidden or encrypted 
at all. Although the memory move looks 
innocuous, there is something su.spicious about 
moving code from the RWIS routine area to 
page $2 (the input buffer), which gets partially 
(Overwritten by a reset into the monitor. To 



follow the program How ] decided to examine 
pages $B6 and $B7 rather than 1^2 and S3 . .Since 
they were mirror imagcu of each other (with 
the exception that page $2 was a little scrambled 
by my entry into the tnonitor), it shouldn't 
matter which set I examined. 

Page .$B6 h.id the unusual heginint:: 

B60e- 4C 04 02 JMP S0204 
B503- 2C A9 01 BIT 501 A9 
B6e6- 80. £E 03 STA $03EE 

Since this code aUo resides at $200 in 
memory, the JMP at SB6W (and S2m) onl\ 
jumps over 1 byte. SB603 (or S203), If we list 
the code as the conipiiicr would sec it upon 
execution (skipping byte $B603, that is) it would 
look like this: 

B600- 4C 04 02 JMP J0204 
B604- A9 01 LDA ttm 
eO EE 03 STA S03EE 



It loads the ficcumulator with a i/.SOl and 
stores it at $03EE. This funny jump is one of 
the few bits of trickery Addison- Wesley has 
included in their protection scheme . however. 
[..ooking further down the sector, v^e see a 
segment of code that turns on the hi-res screen. 
Thi."; code starts at $B6I7 and runs through 
$B620. At SB623 there is a JSR (Jump to 
StibRoiiiine) to $348. The routine at S34K is also 
at $B748. Thus, we can see what the routine 
docs by typinj: B748CJ, The disk spins, and the 
drive head reads several tracks in rapid 
succession. If you li.sten carefully to a boot of 
The Hobbit. you find that this is what the drive 
does immediately before the computer hangs, 
on a bad copy. Notice that the routine returns 
control to the monitor. This tells us that it 
returns to the instruction iininedlately following 
the JSR: it docs not jump off to other code. 

The instructions following the JSK start at 
$B626 and look like: 



B623- 


20 48 03 


m 


50348 


B526- 


A5 01 


LDA 


101 


B628- 


F0 03 


BEO 


IBG2D 


e62A- 


4C 2A 02 


JMP 


502 2A 


862D- 


A9 03 


LDA 


frS03 



Note the EEQ (Brunch if EQual) instruction 
at .SR628. This sends pi'ogram control to SB62D 
if the value stored at $01 is zero (if a BEQ or 
RNF is executed without a CoMPare statement 
preceding, thccomputer assumes you meant to 
compare the accumulator with zero). This jump 
only skips over one instruction, the IMP $022A 
at SB62A. The JMP at 5B62A must be 
import ant, II we type B62DG. the prograni 
continues hooting, and the game runs normally. 
Now look al the JMP S022A carefully. 
Remember the memory move commands we 
saw on page S8'' Thev transferred evcrvlhing 
from $B600-SB6FF to $20(i-$2FF. That means 
that the JMP S022A is stored in memory at 
S22A. It is a continuous loop. This is what 
causes the coniputei in hang if the nibble count 
fails. The program simply brunches to a loop 
from which it cannot escape. If we can get rid 
of the JMP Stl22A. and hence destroy the loop, 
we have deprotccted the game 

It turns out to be quite simple to di,sconncct. 
First I seurclied the disk for the code 
surrounding the JMP. I found the JMP on track 
S0. sector SI. byte $2A I replaced the three 
bytes [hat compose the JMP instruction with 
NOP ($EA, No Operation) instructions. Thus 
the program would continue to the code at 
SB62D ($22D) regaj'dless of the result of the 
nibble count. 

Step by Step 

1) Copy Jhe Hobbit usinj; any standard disk 
copier. Even COPY A will work. 

2) Using a sector edit such as DiskEdit. make 
the following sector edits: 

Track Sector Byte From To 



500 


501 


S2A 


I4C 


SEA 




S00 


S01 


S2B 


S2A 


SEA 




%m 


$01 


■S2C 


$02 


$EA 




That 


s it! Enjoy you 


r unprotected 


version of 


The Hobbit. 




















t 
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hr 



4000 


30 58 PC m E2 F3 8D 52 C0 A9 FF 


400B 


35 E4 A0 00 34 FC 84 FD 84 FB 69 


4016 


D0 40 S4 01 4S A5 C9 lA DO 0F A9 


4021 


00 85 FC 85 FD A5 FB 18 69 0E 85 


49ZC 


FB D0 62 SA AA ED 9C 40 85 FE ES 


4037 


BD 9C 40 85 FF A2 0F 06 FF 26 FE 


4942 


90 3F 85 00 8A 0A AA 43 BD 67 41 


404D 


48 4A 4A) 4A 4A A4 FD 18 6b FC % 


405S 


01 C8 AA 68 29 0F 16 65 FB 20 11 


4063 


F4 68 AA E8 BD 67 41 48 29 0F 18 


406E 


65 FB A8 68 A6 FD 4A 4A 4A 4A 18 


4079 


65 FC 90 01 E8 20 3A F5 A6 00 CA 


4084 


10 B8 A5 FC 18 69 0E 85 FC 90 02 


408F 


E5 FD A4 01 C8 C0 97 F0 03 4C 15 


409A 


40 60 00 5F 00 7F(00 33 14 91 00 


40A5 


3B 00 IB 20 73 00 5D 40 00 00 74 


40B0 


0B 11 00 31 02 D5 04 05 00 77 00 


4DBB 


IF 00 00 08 IF 00 6B 40 02 00 75 


40C6 


00 08 0B 00 14 80 10 0D 00 00 A2 


40D1 


Al AE AA A0 SI AE B5 A2 AD AS B6 


40DC 


BF BF Bl B7 AD AE A3 B5 AB AE AB 


40E7 


AA AA BD B5 A6 AD B7 AF BTI BF A5 


40F3 


87 55 A4 AD B4 A5 A7 AS A3 Al B5 


40 FD 


AE AD A3 Al B4 B7 BF B6 Al A8 A6 


4108 


B7 B5 B6 AB B5 A5 Al B7 B6 B4 AE 


4113 


BD BF A6 A5 B6 A5 BF BF B6 A2 Al 


411E 


B5 A6 AD B7 AF A4 Bl B7 B6 Al B4 


4129 


B7 HF B6 B0 67 A2 AD B4 B6 B5 AO 


4134 


B7 65 A9 Bl A7 A2 65 A9 A9 64 Al 


4i3F 


BRfBl B7 Al A0 Bl AE B5 AD A8 B& 


414A 


B6 A2 AD B7 BF A5 87 AA Al A? 66 


4156 


BF BF B3 B4 Al Bl B7 Al A5 A4 AE 


4150 


Al B5 B6 AS AB 02 BF 00 05 00 A0 


416B 


AS A5 05 A5 05 0A 0A AA A5 AA 30 


4176 


53 05 53 53 A0 53 A5 05 AA 0A A5 


4181 


55 A5 50 5A ^ ^^J^^CPO 



ESSENTIAL DATA DUPLICATOR 



Back up your copyprotected disks with 
Essential Data Duplicator 4 PLUS. ■ 

EDO 4 PIUS is new technology, not just 
"another" copy program. The EDD 4 _ 
PLUS program jses a specially -^ 
[Jesfgned hardware card which j( 
works with your disk driwes to , 
back up disks by accurately 
copying the bits of data from 
each track. Don't be fooled. . , 
no other copy- program/system ■ 
forApplcscandothis! ■ Inadtii- ^ 
tion to backing up disks. EOD 4 PLUS 
includes several ysetut utilities such as 
examining disk drives, certifying disks, dis- 
playing drive speed rpm's, plus more' 
■ EDD 4 PLUS runs on Apple 1 1, II Plus 
(including most compatibles), and lie, 
and Is priced at $129,95 (duodisk/uni- 
.disk 5.25 owners must add S15 lor a . 
fe)^ special cable adapter). Add $5,00 
. ($8.00 foreign) ship /handling 






when ordering direct. BA standard EDD 4 
version which doesn't irclnde any hard- 
ware is available, and can be used on Apple 
, lie and III (using emulations mode) and 
""fe;;j IS priced at $79.95. Add S3,00 ($6.00 
;^% foreign) ship/handling when 
■ ordering direct. ■ If you own 
: an earlier version, send us 
;||? your EOD disk and deduct $50 
f*f from your order ■ Ask 
^ |w;- for EDD 4 PLUS at your local 
^,^ji*' computer store, or order direct 
(Vtastercard and Visa accepted. All 
orders must be prepaid ■ In addition, 
, registered owners may purchase EDDls 
:■ printed 6502 SOURCE CODE listing for 
educational purposes. 

UTILICO MICROWARE 

3377 SOLANO AVE., SUITE 352 
: NAPA. CA 34558/(707} 257-2420 




to the Senior PROm! 

EKamine, modify, and backup your 
Apple //e and //c softtirare' 



Senior 

Prom 



I 

V cuTTinavntE 




The Senior PROn is a hardware dec ice with deprotection 
utilities instantly ai'dlable frorm any program. Including: 

-Enter the tlonitor to examine or change memory. 
•Display where in memory the program was running. 
■Disassemble, k'iew or sak'e any memory, et^en $00-7FF. 
•Display the Stack for return subroutine addresses. 
■Instantly switch between two di-f-ferent GHk programs. 

After interrupting a program ond examining or altering 
memory, the program may be instantly restarted. Or it 
may be saved to disk in norma! S-fiks &< later restarted. 

The Senior PROM also has a sophisticated Sector Editor 
and Memory /Disk Detective, and its own DOS with disk 
copy, format, edit, and protected disk utilities, all without 
booting a disk first! Assembly Language utilities include 
Step and Trace, an flssembler, and more. Undetectable 
by software or hordware, does not use a peripheral slot. 
Extensile documentotion and guide to copy protection. 

Economically priced at $T9,95 for prepaid orders with 
check or money order. Credit card orders available for 
% 8 8.9 5 . Spec if y //c , or //e standard or enhanced ROMs, 

For |@Bi 1^ order* call 317-743-4041, 10-5 E.S.T. 

Of 3i3-3-1-9-2'95-1- Modem 2-1- hrs. Not inttniftil ^er illfanl uif. 



Cutting V.i]ge\:^nt;erppi5ei 

43234 Ren Cen Station. Detroit. Ml 48243 



Coming soon 



(to a magazine near you) 
COMPUTIST No. 36: 

Softkeys for: Fligiit Simulator II vl .05, Autoduel, Critical Reading, Troll's Tale, Rotiot War, General Manager, Plasmania, Tclarium 
Software, Kidwriter vl.0, Color Me. 

Features: Screenwriter meas Flashcard, The Bus Monitor, Mousepaint for non- Apples, 

Cnre: a character editor: The Bard's Dressing Room 

APT: ChanjpioHship Lode Runner. 



COMPUTIST No. 37: 

Softkeys for: Under Fire, Pegasus ][, Take 1 (revisited), Magic Slate, Alter Ego, Rendezvous, Quicken, Story Tree, Assembly Language 
Tutor, Aval on Hill games. Dark Crystal. 

Ftalurts: Playing Karateka on a //c, Track Finder, Sylk to Dif. 

Core; Breaking In: tips for beginners. The DOS Alterer. 

Review: Copy J[ Plus, 6.S. 



5 FREE DISKS 

With every set of 20 disks you order. You can get sets for as low as 

$iy.oo 

That's a total of 25 disks for as little as 

68^ a disk 

These are SS/DD Namebrand, 5V4" floppies, 100% guaranteed, & include: 
reinforced hubs, write-protect tabs, & Tyvek sleeves. 



Nama. 



Addresj 

City 

Cburttiv _ 

signature 



1D#. 



State 



21p 



Phone 



f^xp. 



Send me . 



. sets at $17.00 per set. 



Most orders shipped UPS. Plsosa use str^^i address. 



.CP35 



Add $3 shipping and handling for the first set, 
and $1 tor each addiliona! set. 
Foreign orders add 20% shipping and handling. 
U.S. funds drawn on U.S. banks only. 
Washington orders add 7.B% sales tax. 
Send your orders to: 

NottKey Put)IL<ih)ng 

PO Bex 1 10846-T 

Tacoma, W\ 98411 
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Sofikeys I Crisis Mountain | Terripin 
Logo I Apple Logo U | Fjshies 1,0 I Spell Works ! 
Gumball ] keadem' Sofikeys \ Rescue at Rigd | Crarey 
Mazey | Conan | Peny Mason: The Case of the 
Mandarin Murder | Koronis Rift | Feature | More ROM 
Running [ Core \ Infocom Revealed | 



Softkeys \ Word Juggler | link! Tonk! | 
Sundog v2.0 I G.l Joe & Lucas Film's Eidolon | 
Summer Gaines II | Thief | Instant Pascal | World's 
Greatest Football Game | Readers' Sofikays | Graphic 
Adventure #1 | Sensible Grammar & Extended 
Bookends | Chipwits | Hardball | King's Quest II | The 
World's Greatest Baseball Game ) Feature | How to be 
the Sound Master | Core \ The Mapping of Ultima IV | 



Sofikeys | Revisiting Music Construction 
Set I Cubit I Baudville Software | Hartley Software | 
Bridge | Early Games for Young ChUdren | Tawala's 
Last Redoubt | Readers' Sofikeys \ Print Shop 
Companion | Kracking Vol JI i Moebius | Mouse 
Budget, Mouse Word & Mouse Desk [ Adventure 
Construction Set | Feature \ Using Data Disks Widi 
Microzines | Core \ Super lOB v!.5 a Reprint | 

«A JL Sofikeys | Trivia Fever | The Original 
Boston Computer Diet | Lifesavcr | Synergistic 
Software I Blazing Paddles i Zardax | Readers' 
Sofikeys \ Time Zone | Tycoon | Earthly Delights | 
jingle Disk | Crystal Caverns | Karate Champ j 
Feature i A Little Help Widi The Bard's Tale | Core \ 
Black Box I Unrestricted Ampersand | 



Sofikeys | Millionaire | SSI's RDOS [ 
Fantavision | Spy vs. Spy | Dragonworld | Renders ' 
Sofikeys \ King's Quest | Mastering die SAT | Easy as 
ABC i Space Shuttle | The Factory | Visidex LIE | 
Sherlo<:k Holmes | The Bards Tale | Feature \ 
tncreasing Your Disk Capacity | Core \ Ultimate r IV, 
an Ultima IV Character Editor | ,,,, ..,,. 



Sofikeyx | Threshold | Checkers v2,l | 
MictDtype I Gen. &. Organic Chemistry Series | Uptown 
Trivia | Murder by the Dozen | Readers ' Sofikeys \ 
Wmdham's Cla,ssics | Baner Up | Evelyn Wood's 
Dynamic Reader I Jenny of die Prairie | Learn About 
Sounds in Reading | Winter Games | Feature \ 
Customizing the Monitor by Adding 65C02 
Disassembly | Core \ The Animator | 



Sofikeys \ Ultima IV | Robot Odyssey | 
Rendezvous | Word Attack & Classmate 1 Three from 
Mindscape | Alphabetic Keyboarding i Hacker | Disk 
Director | Lode Runner | MIDI/4 | Readers' Sofikeys I 
Algebra Scrie.s | Tinie is Money | Pitslop n | Apventure 
to Atlantis [ Feature I Capturing die Hidden Archon 
Editor I Core \ Fingerprint Plus: A Review | Beneath 
Beyond Casde Wolfenstein (part 2) ] 



_ Sofikeys \ Cannonball Blitz | instant 

Recall I Gessler Spanish Software ! More Stickybears ! 
Readers ' Sofikeys \ Financial Cookbook | Super 
Zaxxon | Wizardry | Preschool Fun | Holy Grail I 
Inca I 128K Zaxxon | Feature \ ProEdU | Core | Games 
of 19S5 part I | 



Sofikeys I DB Master 4.2 | Business 
Writer | Barren's Computer SAT I Take 1 | feuik Streei 
Speller ; Where In The World Is Carmen Sandiego | 
Bank Street Writer 128K | Word Challenge | Readers' 
Sofikeys \ Spy's Demise | Mind Prober | BC's Quest For 
Tires .' Early Games | Homeword Speller | Feature | 
Adding IF THEN ELSE To Applesoft | Core | DOS To 
ProDOS And Back | 



Sofikeys I Electronic Arts software | 
Grolier software | Xyphus [ F-15 Strike Eagle | Injured 
Engine | Readers' Sofikeys | Mr. Robot And His Robot 
Factory | Applecillin II i Alphabet Zoo I Fallioms 40 | 
Story Maker ; Early Games Matchmaker | Robots Of 
Dawn I Feature \ Essential Data Duplicator copy 
prms I Core ( Direci Sector Access From DOS | .. 



Sofikeys \ Choplifter | Mufplot | 
Flashcalc | Karateka | Newsroom | E-Z Draw | 
Readers' Sofikeys \ Gato | Dino Eggs 1 Pinball 
Construction Set | TAC | The Print Shop: Graphics 
Library | Death In The Caribbean | Features | Using 
A,R,D, To Softkey Mars Cars I How To Be The 
Writemaster | Core | Wheel Of Money | 



Sofikep I Miner 204%;r | Lode Runner [ 
A2-PB1 Pinball | Readers' Sofikeys \ The Heist | Old 
Ironsides | Grandma's House | In Search of the Mosi 
Amazing Thing i Morloc's Tower | Marauder ' Sargon 
ID I Features \ Customised Drive Speed Control j Super 
lOB version 1.5 | Core \ The Macro System | 



Sofikeys \ Microiines 1-5 | Microzines 
7-9 I Microzines {alternate method) I Phi Beta Filer ! 
Sword of Kadash | Readers ' Sofikeys | Another Miner 
2049er | Learning With Fuzzy womp | Bookends | 
Apple Logo II I Murder on the Zindemeuf | Features j 
Daleks: Exploring Artificial Intelligence | Making 32K 
or 16K Slave Disks | Core ) The Games of 1985: part 
III 



Sofikeys \ Sargon IE i Wizardry: Proving 
Grounds of the Mad Overlord and Knight of Diamonds ' 
Reader' Sofikeys \ The Report Card VI . 1 | Kidwriter i 
Feattire | Apple ][ Boo[ ROM Disassembly | Core i The 
Graphic Grabber v3.0 ! Copy !I+ 5,0: A Review | The 
Know-Drive: A Hardware Evaluation | An Improved 
BASIC/Binary Combo | 

A ^9 Readers ' Sofikeys \ Rendezvous With 
Rama | Peaehtiee's Back To Basics Accounting System I 
HSD Statistics Series | ArishmelickJe I Arithmekicks and 
Early Games for Children | Features \ Double Your 
ROM Space ! Towards a Better F8 ROM | The Nibblcr: 
A Utility Progi^m to Examine Raw Nibbles From Disk | 
Core I The Games of 1984: In Review -part II | 

1 ^ Softkeys \ The Prim Shop | Crossword 
Magic I The Standing Stones | Beer Run | Sky fox | 
Random House Disks I Features | A Tutorial For Disk 
Inspection and the Use Of Super lOB | S-C Macro 
Assembler Directives (reprint) | Core \ The Graphic 
Grabber For The Print Shop i The Lone Catalog 
/^ranger vI.O Part 2 \ 



1 ^> Sofikey | Sensible Speller for ProDOS I 
Sideways | Readers' Sofikeys \ Rescue Raiders i' Sheila I 
Basic Building Blocks | Ansci Programs I Crossfire ! 
Feature \ Secret Weapon: RAMcard | Core \ The 
Controller Writer | A Fix For The Beyond Castle 
Wolfenstein Softkey I The Lone Catalog Arranger 
Pan 1 I ,,,..,„....,........,.,,„,., 

1 ^» Sofikeys \ Uf Pak | Beyond Castle 
Wolfenstein | Transylvania | The Quest | Electronic 
Arts I Snooper Troops (Case 2) | DLM Software | 
Learning With Leeper I TellStar i Cure \ CSaver: The 
Advanced Way to Store Super lOB Controllers | Adding 
New Commands to DOS 3,3 | Fixing ProDOS 1.0.1 
BSAVE Bug I Review \ Enhancing Your Apple | 
Feature : Locksmith 5.U and Locksmith Programming 



^ Sofikeys \ Zaxxon | Mask of the Sun | Crush | 
Crumble & Chomp | Snake Byte I DB Master I 
Mouskattack | Features \ Making Liberated Backups 
That Retain Their Copy Protection ! S-C Assembler: 
Review ! Disk Directory Designer I Cure \ Corefiter: 
Part I I Upper &. Lower Case Output for Zork | ,,,. 

^ft Sofikeys \ Ultima 11 | Witness | Prisoner II | Pesi 
Patrol I Adventure Tips tor Ultima II & 111 ■' Copy 11 
Plus FARMS Update | Feature I Ultima 11 Character 
Editor I ...,.,,..5.„„.,.,„.„ .,;„...y 

1 Sofikeys \ Data Reporter I Multiplan | Zork [ 
Features [ FARMS for Copy II Plus i No More Bugs | 
APT's for Choplifter & Cannonball Blitz I 'Copycard' 
Re^liews \ Replay . Cracks hot | Snapshot | Wildcard | 

CORE 3 Games: 

Constructing Your Own Joystick | Compiling Games | 

GAMEREmiVS: Over 30 of the latest and best I Pick 
or The Pack: AU-time TOP 20 games | Destructive 
Forces I EAMOM | Graphics Magician and 
GraFORTH ' Dragon Dungeon | „.,.,. 



Utilites: 



CORE 2 

Dynamic Menu | High Res: Scroll Demo | GOTO 
Label; Replace | Line Find | Quick Copy; Copy ' 



1 .Graphics 

Memory .Map | Text Graphics: Marquee | Boxes 
Jagged Scroller I Low Res: Color Character Chart 
High Res; Screen Cruncher i The UFO Factory 
Color I Vector Graphics: Shimmering Shapes | A Shape 
Table Mini-Editor | flkick Graphics: Arcade Quality 
Graphics for BASIC Progratraners | Animation i .,,. 

Hardcore Computing 3 

HyperDOS Creator Menu Hello I Zyphyr Wars | 
Vector Graphics | Review of Bit Copiers | Boot Code 
Tracing j Softkey lOB | Interview with 'Md^e' 
Markkula | ,,.„„. 

For special savings, order our 

'Core Special' 

and receive all three CORE 

magazines for only $10.00 



Back Issues & Library Disks order form 



I«sae 

35. . 
34. . 
33. . 
3Z. . 
31 . . 
30 . . 
29. . 
28 . . 
27. . 
2B . . 
25. . 
24. . 

tV23 
22 . . 
21. . 
20. . 
19. . 
18. . 
17. . 
16. . 
15. . 
14. . 

frl3 
12. . 
11. . 
lO. . 
9. . . 
8. . . 

■A-7. 
6. . . 

^4 . 
3. . . 
Cora 
2. . . 
1. . . 
Core 1 . 
Cora 3 . 
Computing 3 
Beit of Haidcaie 
CompQting . . 



Mag Di£i[ BqUi 
S4.75 $9.95 Sia.95 

□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 

n n n 

n n n 

n n □ 

n n n 

□ □ n 

□ □ n 

□ □ n 

□ □ □ 

□ □ □ 

□ n n 

NA □ NA 

□ an 

□ □ □ 

NA a NA 

n □ n 

□ n □ 

HA n NA 

NA n NA 

□ □ □ 
NA □ BA 
NA □ NA 

NA 
NA 
NA 
□ 
□ NA 



NA 
NA 
NA 
□ 
NA 

n 

NA 

□ 
NA 

U 
□ 



□ 
□ 

D 



□ 

NA 
□ 
NA 

U 
□ 



□ □ □ 
n NA NA 

NA □ NA 



Core Special SIO.OO LJ 
(All three CORE magazines) 

Special "Both" disic & magazine 
combination orders apply to one 
issue and its corresponding 
disk. 

Some disks apply to more tlian 
one Issue and are shown as 
taller boxes. 

-d^ We have a limited supply 
of tliese Issues. 



BACK ISSUES 

and 

LIBRARY 
DISKS 

of COMPUTIST ( famerly Hardcore COMPVTIST } 
are stUl available, though some issues (marl(ed NA) are sold out, 
library dlslts are available for ALL issues of COIVlPUTfST. 

LIBRARY DISKS 

are perfect companions for 

COMPUTIST 

Documentation for Library Disks is in the corresponding issue. 



Send me 

Mame 


the back 


issues 


and/or library disks Indicated: 
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AririrnRfi 
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fitstfi 7ifi 








Countfy 

Eli 






Ptionfi 
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__ CP3S 



Send check or money order to: COMPUTIST PO Box 110846-T Tacoma, WA 9841 1 . Most orders shipped 
UPS so please use street address. Otter good wtille supply lasts. In Washington state: add 7. s% sales tax. 



Back Issue Rates For Foreign Orders 



FOREIGN MAGAZINE ORDERS ■• 
Price for each magazine includes shipping. 

1-2 copies 



3 to 4 copies 5 or more copies 



Canada/Mexico $8.00 each .$7.00 each.. $6.00 each. 

Ot^er Foreign S14,25 each $13.25 each 1Z.Z5 each. 



FOREIGN DISK ORDERS 



Disks are SI 1.94 each {includes stupping). Special "Both" disk and magazine comtiinBtiDiis stiown 
do NOT apply to Forsign orders. US funds drawn or US banke. All {oraign orders sent AIR RATES, 



Writer's Guide 



COMPIjyiST 

is a iiioiiLhIy magii/ine dediciiied lo thi? 
seriuus user ot ihc Apple for compatible) 
computer. COMPimST wi^lcnmus articlf"; 
on a vuriety of iubjccls m iill levels <>1 
lechnical ditTicuity but requires accurate 
data, technical competence, correct Hnglish 
usa^e, readable style, and flilly defined 
jargon and buiLi? word's. 



SUBJECTS 



MANUSCRIPT 
MECHANICS 



All manuscripts must be typed or primed 
on one side of the paper Text should be 
double-spaced. 

Printouts .should use a mm-compicssed 
font with both upper and lower case. A letter 
quality mode is pnetbrred, with each page 
torn at the perforation only. Pages need not 
he stapled together. The cover page of each 
iiiuiiu.script should ctmtain the following 
data: 

TITLE Of WORK 

FULL NAME OF AUTHOR 

ADDRESS 

PHONE NUMBER 

Each page of the nuinuscript tmd program 
listing should include the author's name, the 
title of the woik, and the page number in 
the upper right hand earner. 

The .irtiele and any accompanying 
program SHOLILU BE SUBJVUTTED AS 
A STANDARD TEXT FILE ON A DOS 
3.3 DISK. Label the disk with the title of 
the work and the author'.s full name and 
address ON DISK, lEXT MUST BI-: 
SINGLE-SPACED ONLY. Please identify 
your cdhing program. 

Original disks are always returned as soon 
as possible. Other materials will be returned 
only when adequate return packaging and 
postage is enclosed. We are not responsible 
for unreturned submifision.'s. We wil! 
^uaranwe the return of original commercial 
di.sks mailed to us for verification of an 
accompanying softkcy. 

You will be notified of the status of your 
submi.ssKm within 4 to 6 weeks after it is 
received if the article is a softkey 
accompanied by an original disk. Please 
submit completed manuscripts directly; do 
not query first. Previously published 
material and simultaneous submissions are 
not accepted. 



We prefer material on these topics; 

ll Original program/aniclc eombmations 

2) General articles (Apple eoiiiputing) 

3) Softkcys 

4) Advanced Playing Tcehniques (APT's) 

5) Hardware mtxiifications 

6) DOS modifications 

7) Product reviews (hardware and software) 
R) [Jtilities 

9^ Bit Copy Parameters 



WRITING 
YOUR ARTICLE 



Observe the following points of .style: 

A. Always assume that your reader is ;i 
novice and explain all buzzwords and 
technical jargon. Pay special attention to 
grammar and punctuation; wc require 
technical eompeience bin also good. 
readable style. 

B. Whenever appropriate, a list of hardware 
and software recjuirements should be 
included at the beginning of ihe manuscript. 
When published, this list will be offset from 
the maiti text. 

C- Include the name and address of the 
manufacturer and the price when a 
commercial program is mentioned. This is 
of particular importance in PRODUCT 
REVIEWS. 

D. When subiiittimg programs, first 
introduce the purpose of the piogram and 
leatures of special interest. Include 
background information describing its use. 
Tips for advanced uses, program 
modifications, :ind utilities can also he 
incltided. Avoid long print statements and 
use TAQs instead of .spaces. 

Remember: A beginner should be able to 
type the program with ease. 

E. A PROGRAM is not aecoptcd for 
publication without an accompanying 
urlicle. Ttiche articles, us well as aniclcs on 
hardware and DO.S modifications MUST 
suiiiiiiariic the action of the main routines 
and include a fully remarked listing. 



F. GENERAL ARTICLES may include 
advanced tips, tutorials, and explorations of 

a particular aspect of Apple computing. 

C. SOFTKEYS of any length are acceptable 
and must contain detailed step by step 
pioeedurcs. For each softkey, first introduce 
the locking technique u.sed and then give 
precise steps to unlock the copy-protected 
program. Number each step whenever 
possible. We accept articles which explain 
locking techniques used in several programs 
putilistied by Ihe same company. 

II. When allermg game programs, the 
changes made are sometimes extensive 
enough to warrant the title of ADVANCED 
PLAYING I tiCHNiyUE (APT^. APTsean 
deal with alterations to a program, deleting 
annoy livg s;)unds, acquiring more points in 
play and avoiding ha/ards Again, provide 
step-by -step instructions to complete each 
APT and explain each step's tunetion. 
AFI's of 100 words or more arc preferred. 



AUTHOR'S RIGHTS 



Eacii article is published under the 
author's byline. As a rule, all rights, as well 
as one-time lepiiiit ligliLs arc purchased. 
Purchase of e.velusive rights to programs is 
required: however, aUeritale arrangements 
may be made with individual authors 
depending on the merit of the contribution. 



PAYMENTS 



COM PUT 1ST pays upon publication. 
Rate of payment depends on the amount ol 
editing required and the length of the article. 
Payment ranges from $20 to $50 per type.sct 
page for an article. We also pay SIO to S20 
fur short solikeys and AFf's. A fully 
explained softkcy accomprinied by the 
commercial disk lor verification may cant 
up to $50 per typeset page. 

Please mail your siibmis«iioiis to: 

COMPUTIST 
Editorial Department 

PO Box 110846-T 
Tacoma, WA 98411 



i^ 



big deal. 

We raally in»aii it. Thi< U tnilf a big dtal. We want to Mil you a book or two. Ke»d we eay more? -^ 

The Book 

Of Softkeys 

Volume 



4 



» '•!■ 



At long last, The second volume in our series of compilations is ready. Once 
again, we have combined several issues of (Hardcore) COMPUTIST into one compact 
book. Volume II of the Book Of Softkeys contains articles from issues 6 through 10. 

The Big Deal is, Volume 11 has a lower price than Volume I originally had. Not 
only that, but the price of Volume I has been massively reduced. The two books 
make an economical alternative to those rare (and unavailable) back issues of 
Hardcore COMPUTIST. 



Volume II ($17.95) 



contains softkeys for: Apple Cider Spider ] Apple Logo | Arcade 
Machine | The Ailisl | Bus A Strecl Writer | Cannon ball BliU | Cariyuti 
Climber | Caverns of frcitag | Crush, Crumble & Chomp | Data h'aetory 
5 .(S I DB Master [ The Dic*tioti*ary | Kssentiial Data Duplicator 1 & Ul 1 
Cold Rush I Krell Loco | Legacy of Llylgamyn ! Mask Of The Sun | Minit 
Man I Monskattack T Music Construction Set | Oil's Well | Pandora's 
Bos I Robotroti I Samniy Lightfoot | Screenwriter II v2.2 | Sensible 
Spdl-r 4.0, 4,ec, 4. le I the Spy Strikes Back | Time Zone vl . 1 | Visible 
Computer: 6502 | Vjsidcx 1 Visitcirn | Zaxxon | Haydcn Software | Sierra 
Online Software | PLUS the complete listing of the ultimate cracking 
prof ram... Super lOB 1.5 | and more! 



Volume I ($12.95) 



contams softkeys for: Akalabeth | Ampermagie | Apple GaiaAitui | Aztee 
Bag of Tricks | Bill Budge's Trilogy | Buzzard 4ait | Cannonball Blitz 
Casino | Data Reporter | Deadline | Disk Orginizer II | Egbert 11 
Communications Disk | Hard Hat Mack | Hume Accountant | 
Homeword | Lancaster | Magic Window 11 | Multi-disk Catalog 1 
Mulliplan I Pest Patrol | Prisoner 11 | Sammy Lightfoot | Screen Writer 
n I Sneakers | Spy's Demise | Starcross 1 Suspended | Ultima II 
Visifiic I Visiplot | Visitrcnd | Witness | Wizardry | Zork 1 | Zork U 
Zork III I PLUS how-to articles and program listings of need-to-have 
programs u.sed to make unprotected backups. 



To Order: Send $17.95 + Shipping and Handling for Volume II and/or $12.95 + S&H for Volume I. Shipping and handling is $2.00 
per book for US orders, $5.00 per book for foreign orders. U.S. funds drawn on U.S. banks only, Washington State orders add 7.8° a 
sales tax. Send your orders to: SoftKey Publishing, PO Box 110937-BK, Tacoma, WA 98411 



